This vulnerability in danbriapps Pre-Publish Post Checklist arises from incorrectly configured access control security levels, specifically missing authorization checks. It affects all versions up to and including 3.1. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low. No patch or official remediation guidance has been provided, and the product is not a cloud service.

An attacker with low privileges can exploit the missing authorization to perform unauthorized actions that may alter data integrity within the Pre-Publish Post Checklist plugin. There is no impact on confidentiality or availability. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to trusted users only and monitor for unusual activity related to the Pre-Publish Post Checklist plugin. Avoid granting unnecessary privileges to users interacting with this plugin.