The Better Business Reviews plugin (versions <= 0.1.1) suffers from a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue enables attackers with low privileges to perform unauthorized actions that can affect the integrity and availability of the system. The vulnerability is identified as CVE-2026-23804 with a CVSS 3.1 base score of 5.4, indicating a medium severity risk. No known exploits are reported in the wild, and no official patch or remediation guidance is currently available.

The vulnerability can lead to unauthorized modification or disruption of the plugin's functionality due to missing authorization checks. While confidentiality is not impacted, integrity and availability may be compromised. The medium severity score reflects the potential for limited but meaningful impact if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and harden access control configurations where possible to limit exposure. Monitor for updates from BBR Plugins regarding patches or official mitigations.