This vulnerability in the 'Import YouTube videos as WP Posts' WordPress plugin arises from missing authorization checks, enabling attackers to bypass access controls. The CVSS 3.1 score is 7.5 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The flaw affects all versions up to 2.1. No official patch or vendor advisory has been published, and no exploits are known in the wild.

Exploitation of this vulnerability allows an attacker with network access to modify data without authorization, potentially altering posts imported from YouTube videos. There is no impact on confidentiality or availability. The integrity impact is high, meaning unauthorized changes to content can occur. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the plugin's functionality to trusted users only and monitor for unusual activity related to YouTube video imports. Avoid exposing the plugin's import features to unauthenticated or untrusted users.