This vulnerability in the Automatic Featured Images from Videos plugin by webdevstudios is due to missing authorization checks, which allows users with limited privileges to perform actions beyond their intended access. It affects all versions up to and including 1.2.4. The CVSS score is 4.3 (medium), reflecting a network attack vector with low complexity and requiring low privileges, no user interaction, and impacts integrity only. No vendor advisory or patch information is provided, and the plugin is not a cloud service.

The vulnerability allows unauthorized modification or manipulation of plugin functionality due to missing access control enforcement. There is no impact on confidentiality or availability, but integrity of the plugin's operations can be compromised. Since no exploits are known in the wild, the immediate risk is moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict plugin usage to trusted users with appropriate privileges and monitor for updates from webdevstudios. Avoid granting unnecessary privileges that could be leveraged to exploit this vulnerability.