This vulnerability in BBR Plugins' Better Business Reviews product arises from missing authorization checks, which leads to incorrect access control enforcement. This can allow an attacker with limited privileges to perform actions that should require higher authorization. The CVSS score of 5.4 reflects a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and limited availability impact. No patch or official fix information is currently available.

An attacker with some level of privileges could exploit this vulnerability to perform unauthorized actions that may affect the integrity and availability of the affected system. There is no confidentiality impact reported. The vulnerability has not been reported as exploited in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the Better Business Reviews plugin to limit potential exploitation.