CVE-2024-30459 describes a missing authorization vulnerability (CWE-862) in the AIpost AI WP Writer plugin for WordPress, affecting versions through 3.6.5. This vulnerability allows an attacker without privileges to perform actions that should require authorization, potentially leading to limited integrity impact. The CVSS 3.1 base score is 5.3 (medium), with attack vector network, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. No vendor advisory or patch information is currently available, and the product is not a cloud service.

The vulnerability could allow unauthorized users to perform certain actions within the AI WP Writer plugin that should be restricted, potentially modifying data or plugin behavior. The impact is limited to integrity with no confidentiality or availability effects reported. There are no known active exploits targeting this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the plugin's functionality to trusted users only and monitor for unusual activity related to the plugin. Avoid exposing the plugin interfaces to untrusted users where possible.