This vulnerability involves missing authorization checks in the Gutenverse News plugin by Jegstudio, which is used for advanced news magazine blog Gutenberg blocks. Due to incorrect access control configuration, users with limited privileges may exploit this flaw to perform unauthorized actions, impacting the integrity of the system. The issue affects all versions up to 3.0.2. The CVSS score of 6.5 reflects a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No patch or official remediation guidance is currently documented.

The vulnerability allows unauthorized modification or manipulation of data (integrity impact) without affecting confidentiality or availability. Exploitation requires some level of privileges but no user interaction. This could lead to unauthorized changes within the affected plugin's functionality, potentially undermining trust in the content or operations managed by the plugin. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to users with privileges that could exploit this vulnerability and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges to users interacting with the Gutenverse News plugin.