This vulnerability in the raratheme Lawyer Landing Page plugin (versions up to 1.2.7) is due to missing authorization checks, which results in incorrect access control enforcement. The CVSS score of 5.3 reflects a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or remediation details are provided, and no known exploits have been observed in the wild.

The vulnerability allows unauthorized actors to exploit access control weaknesses, potentially modifying data or performing actions without proper authorization. There is no impact on confidentiality or availability. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected plugin or disabling it if feasible.