The Radius of Thought Page and Post Lister plugin (version <= 1.2.1) suffers from a missing authorization vulnerability that results from incorrectly configured access control security levels. This allows an attacker with low privileges to perform actions that should be restricted, leading to potential denial of service conditions. The CVSS 3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability can be exploited by an attacker with some privileges to cause denial of service, impacting the availability of the affected system. There is no impact on confidentiality or integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations for the Page and Post Lister plugin to prevent unauthorized actions by users with limited privileges.