This vulnerability in BBR Plugins' Better Business Reviews plugin involves missing authorization due to incorrectly configured access control security levels. It affects versions up to 0.1.1 and allows users with limited privileges to perform unauthorized actions, impacting the integrity of the system. The CVSS 3.1 score of 4.3 reflects a medium severity, with network attack vector, low attack complexity, requiring privileges, no user interaction, and impact limited to integrity only. No patch or official fix information is available, and the product is not a cloud service.

The vulnerability allows unauthorized modification or manipulation of data due to missing authorization checks, potentially compromising the integrity of the Better Business Reviews plugin. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor vendor communications for updates. In the meantime, restrict access to the plugin features to trusted users only and review access control configurations to minimize risk.