This vulnerability involves missing authorization checks in the Really Simple SSL plugin by Really Simple Plugins, allowing users with limited privileges to perform actions beyond their intended access level due to incorrect access control configurations. The CVSS score of 4.3 reflects a network attack vector with low complexity and no user interaction required, causing limited integrity impact without affecting confidentiality or availability. The affected versions include all releases up to 9.5.7.

The vulnerability allows an attacker with some level of privileges to bypass authorization controls, potentially modifying plugin settings or behavior in unauthorized ways. There is no impact on confidentiality or availability, but integrity of the plugin's configuration or operation may be compromised. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from Really Simple Plugins and apply any forthcoming patches promptly. Until a fix is available, restrict plugin access to trusted users only and review user permissions carefully.