This vulnerability, identified as CWE-862 Missing Authorization, affects Cozmoslabs Profile Builder versions <= 3.16.5. It allows unauthenticated attackers to bypass access controls, potentially modifying data without proper authorization. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low. There is no known exploit in the wild and no vendor-provided patch or official remediation at this time.

The vulnerability enables unauthorized modification of data (integrity impact) without requiring authentication. Confidentiality and availability are not affected. This could allow attackers to alter user profile information or other data managed by the Profile Builder plugin without proper permissions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin or disable it if possible to mitigate risk. Monitor vendor channels for updates.