This vulnerability in SiteLock Security – WP Hardening, Login Security & Malware Scans arises from missing authorization checks, which could allow an attacker with low privileges to exploit improperly configured access control mechanisms. The issue affects all versions up to 5.0.1. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and no user interaction, potentially causing availability impact. No vendor advisory or patch information is provided, and no exploits are known to be active.

The impact is limited to availability, meaning the vulnerability could potentially be used to disrupt service or functionality of the plugin. There is no confidentiality or integrity impact reported. The attack requires low privileges and can be executed remotely without user interaction. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is provided, users should monitor for updates from SiteLock and apply any official fixes once available. Until then, review and tighten access control configurations where possible to reduce risk.