This vulnerability in Barn2 Plugins Posts Table with Search & Sort (up to version 1.4.10) is due to missing authorization checks, which leads to incorrect access control. An attacker can exploit this flaw remotely without authentication or user interaction to gain limited access to data that should be restricted. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality loss without affecting integrity or availability.

The vulnerability allows unauthorized remote attackers to access certain data in the Posts Table with Search & Sort plugin that should be protected by access controls. This results in a confidentiality breach. There is no impact on data integrity or system availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — no official patch or remediation guidance is currently available from the vendor. Users should monitor the Barn2 Plugins advisories for updates. Until a fix is released, restrict access to the affected plugin functionality where possible and review access control configurations to minimize exposure.