This vulnerability arises from missing authorization checks in the SiteLock Security – WP Hardening, Login Security & Malware Scans WordPress plugin, allowing unauthorized users with some privileges to potentially perform actions that should be restricted. The issue affects all versions up to 5.0.1. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring privileges, no user interaction, and impacting availability only. No known exploits or patches are currently documented.

The vulnerability could allow an attacker with some level of privileges to bypass access controls, potentially leading to denial of service or disruption of availability in the affected plugin. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges carefully to minimize risk. Monitor for updates from SiteLock regarding patches or mitigation instructions.