This vulnerability in the WP Google Review Slider plugin (versions <= 17.4) arises from missing authorization checks, which means certain actions can be performed without proper access control. The CVSS score of 5.4 reflects a network attack vector with low attack complexity, requiring privileges but no user interaction, and impacts integrity and availability without affecting confidentiality. The lack of authorization could allow an attacker with some privileges to perform unauthorized actions within the plugin.

The vulnerability does not affect confidentiality but can impact the integrity and availability of the affected system. An attacker with some level of privileges could exploit the missing authorization to perform unauthorized actions, potentially disrupting service or altering data related to the plugin's functionality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict plugin access to trusted users with minimal privileges to reduce risk.