This vulnerability in the Jahid Hasan Admin login URL Change plugin (up to version 1.1.5) is due to missing authorization controls, which allows attackers with some privileges to exploit incorrect access control configurations. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is present. No patch or remediation details are provided in the available data.

The vulnerability allows an attacker with some level of privileges to exploit missing authorization checks, potentially leading to unauthorized modification of data or settings (integrity impact). There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations related to the Admin login URL Change plugin to prevent unauthorized access. Monitor vendor channels for updates.