This vulnerability (CWE-862) in WP Search Analytics arises from missing authorization checks, allowing unauthorized users to perform actions that should be restricted. The issue affects all versions prior to 1.5.0. The CVSS 3.1 base score of 5.3 reflects a network attack vector with low complexity and no privileges or user interaction required, impacting integrity but not confidentiality or availability. No vendor advisory or patch information is currently available, and the plugin is not a cloud service, so remediation depends on vendor updates.

The vulnerability could allow unauthorized users to perform actions that modify or interfere with the plugin's data or functionality, impacting data integrity. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported, so the practical impact is currently limited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's functionality through other means such as web application firewalls or access controls at the server level. Monitor vendor channels for updates and apply patches promptly once available.