The vulnerability identified as CVE-2026-32375 affects the raratheme Travel Diaries plugin (versions up to 1.2.4). It is caused by missing authorization checks, which means that access control mechanisms are improperly configured or absent. This can allow an attacker without privileges to perform actions that should be restricted, resulting in integrity impact but no confidentiality or availability impact. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with low attack complexity. No patch or official remediation information is currently available.

The impact is limited to integrity, meaning unauthorized users may be able to modify data or perform restricted actions within the Travel Diaries plugin. There is no impact on confidentiality or availability. Since no known exploits are reported, the risk is theoretical but should be addressed to prevent potential misuse.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected plugin or disabling it if possible to mitigate risk. Monitor vendor channels for updates regarding patches or official mitigations.