This vulnerability in Kraft Plugins Wheel of Life arises from missing authorization controls, which means that certain actions or resources may be accessible without proper permission checks. It affects all versions up to 1.2.0. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, impacting integrity but not confidentiality or availability. No patch or official fix information is provided, and the product is not a cloud service, so remediation depends on vendor updates or configuration changes.

An attacker can exploit this vulnerability to perform unauthorized actions due to incorrect access control enforcement. The impact is limited to integrity, with no direct confidentiality or availability impact reported. Since no known exploits are in the wild, the immediate risk is moderate but could increase if exploit code becomes available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the affected plugin to prevent unauthorized access. Monitor for vendor updates or security advisories regarding this vulnerability.