This vulnerability in the i.lychkov Mark New Posts plugin arises from missing authorization checks, which means that users with limited privileges might perform actions they should not be allowed to. The issue affects all versions up to and including 7.5.1. The CVSS score of 5.4 reflects a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, but partial integrity and availability impacts. No known exploits are reported in the wild, and no official patch or mitigation guidance has been provided by the vendor.

Exploitation of this vulnerability could allow an attacker with some level of privileges to perform unauthorized actions related to marking new posts, potentially affecting the integrity and availability of the affected system. There is no impact on confidentiality. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations for the Mark New Posts plugin to limit privileges where possible. Monitor vendor communications for updates on patches or official mitigations.