This vulnerability (CWE-862) in WPDeveloper EmbedPress involves missing authorization controls, meaning that the plugin does not properly verify whether a user is authorized to perform specific actions. It affects EmbedPress versions through 3.9.11. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and an impact limited to integrity loss without confidentiality or availability impact. There is currently no vendor-provided patch or official remediation level indicated.

An attacker can exploit this missing authorization vulnerability to perform unauthorized actions that may alter data integrity within the affected EmbedPress plugin. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported, so the threat is theoretical at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the plugin's functionality to trusted users only and monitor for updates from WPDeveloper regarding patches or mitigations.