The raratheme Book Landing Page plugin versions up to 1.2.7 suffer from a missing authorization vulnerability, which results in incorrect access control enforcement. This allows unauthenticated attackers to perform actions that should require authorization, impacting data integrity. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. No vendor patch or advisory is available, and the product is not a cloud service.

Exploitation of this vulnerability could allow an attacker to modify data or perform unauthorized actions within the affected plugin, potentially leading to integrity issues. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently referenced, users should monitor vendor communications for updates. Until a fix is available, restricting access to the affected plugin functionality or disabling the plugin if feasible may reduce exposure.