This vulnerability in SiteLock Security – WP Hardening, Login Security & Malware Scans arises from missing authorization checks, which can be exploited due to incorrectly configured access control security levels. The affected versions include all versions up to and including 5.0.2. The CVSS score is 4.3 (medium), reflecting that the vulnerability requires network access with low complexity and privileges and does not require user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or mitigation details are provided in the available data.

The vulnerability allows an attacker with low privileges and network access to exploit missing authorization controls, potentially leading to unauthorized modification of data or settings within the plugin. There is no impact on confidentiality or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations related to the SiteLock Security plugin to limit exposure. Monitor official SiteLock communications for updates on patches or mitigations.