This vulnerability in SEOPress arises from missing authorization checks, which means certain actions or data may be accessible without proper permission validation. The issue affects all versions up to 8.1.1. The CVSS 3.1 base score is 5.4, indicating a medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacts limited confidentiality and integrity. No vendor advisory or patch links are currently provided, and it is not a cloud service, so remediation depends on vendor updates.

Exploitation of this vulnerability could allow an attacker with low privileges to access or modify data beyond their authorization level, impacting confidentiality and integrity of the affected system. There is no impact on availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to minimize exposure. Monitor for updates from the vendor Benjamin Denis regarding SEOPress plugin patches.