This vulnerability involves missing authorization checks in the AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin, versions up to 2.2.13. Due to incorrectly configured access control, unauthorized users may perform actions that should be restricted. The vulnerability is identified as a Missing Authorization issue but lacks detailed technical specifics or CVSS scoring. No official patch or remediation level has been published, and no known active exploitation has been reported.

The vulnerability could allow unauthorized users to bypass access controls within the affected plugin, potentially leading to unauthorized operations related to cryptocurrency donations. The exact impact depends on the specific actions that can be performed without authorization, which are not detailed in the available information. No known exploits have been reported, indicating limited or no active exploitation currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible and monitor for updates from the vendor. No official remediation or temporary fix is currently documented.