This vulnerability in Image Caption Hover Pro arises from missing authorization controls, which could allow an attacker with limited privileges to perform unauthorized actions due to incorrect access control configurations. The CVSS score of 5.4 reflects a medium severity with network attack vector, low attack complexity, requiring privileges but no user interaction, and impacts integrity and availability. No official patch or vendor advisory is currently available, and the product is not a cloud service.

The vulnerability could allow an attacker with some level of privileges to perform unauthorized modifications or disruptions affecting the integrity and availability of the affected system. There is no evidence of confidentiality impact or active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently documented, users should monitor vendor communications for updates. Until a fix is available, restrict access to the plugin's management interfaces to trusted users only to reduce risk.