This vulnerability in Crawlomatic Multisite Scraper Post Generator arises from missing authorization checks, enabling attackers with limited privileges to perform actions beyond their intended access level. The issue affects all versions up to and including 2.6.8.2. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges and no user interaction, impacting integrity but not confidentiality or availability. No patch or official remediation guidance has been published yet.

The vulnerability allows an attacker with low privileges to bypass access control restrictions, potentially modifying data or performing unauthorized actions within the affected plugin. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations for the Crawlomatic Multisite Scraper Post Generator plugin. Limit user privileges where possible to reduce risk.