This vulnerability in Glowlogix WP Frontend Profile (up to version 1.3.9) involves missing authorization checks, leading to incorrect access control enforcement. This could allow unauthorized users to perform actions that should be restricted. The vulnerability is identified as a Missing Authorization issue but lacks detailed technical or exploit information. No official remediation or patch has been documented yet.

The impact is unauthorized access or actions within the WP Frontend Profile plugin due to missing authorization controls. Without proper access control, attackers might manipulate user profiles or perform other restricted operations. However, the exact scope and severity of potential impacts are not detailed, and no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. Applying general best practices such as limiting plugin usage to trusted users and minimizing exposure may reduce risk but are not specific mitigations for this vulnerability.