This vulnerability in BookPress – For Book Authors arises from missing authorization checks, enabling attackers to bypass access control mechanisms. The issue affects all versions up to 1.2.7. The CVSS vector indicates the vulnerability is remotely exploitable over the network without privileges or user interaction, with no confidentiality impact but with low integrity and high availability impacts. This suggests attackers can cause significant disruption or unauthorized modifications without gaining access to confidential data. No vendor advisory or patch information is currently available.

Exploitation of this vulnerability can lead to unauthorized modification or disruption of the affected system's availability. Although confidentiality is not impacted, the integrity and availability of the system are at risk, which could affect the normal operation of BookPress – For Book Authors installations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected application and monitor for unusual activity related to access control bypass attempts. Avoid deploying the affected versions in sensitive environments if possible.