CVE-2025-62865 describes a missing authorization vulnerability in Evan Herman's Post Cloner plugin versions up to 1.0.0. The issue arises from incorrectly configured access control security levels that allow unauthorized users to perform actions that should require authorization. The CVSS score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. No patch or official remediation has been provided, and no exploits are known in the wild.

The vulnerability allows unauthorized users to modify posts due to missing authorization checks, impacting the integrity of the affected system. There is no impact on confidentiality or availability. The medium severity rating reflects the potential for unauthorized modification but limited scope and complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Post Cloner plugin functionality to trusted users only and monitor for unusual activity related to post cloning or modification. Avoid exposing the plugin to untrusted networks or users.