This vulnerability in SEOPress arises from missing authorization controls, which could allow an attacker with low privileges to access or manipulate certain functionality or data that should be restricted. The issue affects all versions up to 8.1.1. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and no user interaction, but requires some level of privileges. The impact is limited to partial confidentiality loss without affecting integrity or availability.

An attacker with low privileges may exploit this missing authorization to gain unauthorized access to certain data or features, leading to partial confidentiality loss. There is no impact on data integrity or service availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to minimize exposure. Monitor for updates from Benjamin Denis or SEOPress regarding patches or official mitigations.