This vulnerability in WPXPO WowRevenue (versions up to 1.2.13) involves missing authorization controls, allowing users with low privileges to perform unauthorized actions that may affect data integrity. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

The impact is limited to integrity with no confidentiality or availability effects. An attacker with low privileges can exploit the missing authorization to perform unauthorized actions, potentially modifying data or system state within the application. There is no evidence of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected versions to trusted users only and monitor for unusual activity related to authorization. Apply vendor patches promptly once released.