This vulnerability in Jegstudio Gutenverse arises from missing authorization checks, leading to incorrect access control enforcement. It affects all versions up to and including 3.2.1. The issue allows users with some privileges (low privileges) to escalate their impact by performing unauthorized actions, impacting the integrity of the system. The CVSS vector indicates network attack vector, low attack complexity, privileges required are low, no user interaction needed, and the impact is on integrity only, with no confidentiality or availability impact.

The vulnerability can lead to unauthorized modification of data or functionality within the Gutenverse plugin due to improper access control. Confidentiality and availability are not affected. There are no reports of exploitation in the wild, so the immediate risk appears limited but should not be ignored given the integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin features to trusted users only and monitor for suspicious activity related to privilege misuse. Avoid granting unnecessary privileges to users in environments running affected versions.