This vulnerability in WP LinkedIn Auto Publish arises from missing authorization checks, allowing users with limited privileges to perform actions they should not be authorized to execute. The issue affects all versions up to 8.11. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to integrity and availability, with no confidentiality loss. No vendor advisory or patch information is currently available, and no known exploits have been reported.

An attacker with low privileges could exploit this missing authorization vulnerability to perform unauthorized actions within the plugin, potentially leading to limited integrity and availability impacts. There is no indication of confidentiality compromise. The vulnerability does not require user interaction and can be exploited remotely. No known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin to trusted users only and monitor for unusual activity related to LinkedIn auto-publishing features. Avoid granting unnecessary privileges to users who can interact with this plugin.