This vulnerability, identified as CWE-862 (Missing Authorization), exists in Seraphinite Solutions Seraphinite Post .DOCX Source through version 2.16.9. It results from improperly configured access control mechanisms that fail to enforce authorization checks correctly. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable over the network with low attack complexity, requiring low privileges and no user interaction, and impacts confidentiality to a limited extent without affecting integrity or availability. No vendor patch or official remediation level has been disclosed, and the product is not a cloud service.

The vulnerability allows an attacker with low privileges to potentially access resources or functionality that should be restricted, leading to limited confidentiality impact. There is no impact on integrity or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected software to trusted users only and review access control configurations where possible.