This vulnerability in Code Amp Custom Layouts – Post + Product grids made easy arises from missing authorization checks, which allows users with limited privileges to perform actions beyond their intended access rights. The affected versions include all versions up to and including 1.4.12. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring low privileges and no user interaction, impacting integrity but not confidentiality or availability. No vendor advisory or patch information is provided, and the product is not a cloud service.

The vulnerability allows unauthorized modification or manipulation of data within the affected plugin, potentially compromising data integrity. There is no impact on confidentiality or availability. Since no known exploits are reported, the risk is theoretical but should be considered by users of affected versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the plugin features to trusted users only and monitor for unusual activity related to layout or grid modifications. Avoid granting unnecessary privileges to users interacting with this plugin.