This vulnerability involves missing authorization checks in the JS Morisset JSM Show Post Metadata plugin (versions up to 4.6.0). The lack of proper access control allows users with limited privileges to access post metadata that should be restricted. The CVSS score of 4.3 reflects a medium impact primarily on confidentiality, with no impact on integrity or availability. The vulnerability is network exploitable with low attack complexity and does not require user interaction.

The vulnerability allows unauthorized disclosure of post metadata information due to missing authorization controls. There is no impact on data integrity or system availability. The exploit requires low privileges but can be performed remotely over the network. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict access to the affected plugin or disable it if possible to prevent unauthorized access.