This vulnerability in the Automatic Featured Images from Videos plugin by webdevstudios is due to missing authorization checks, which allows users with limited privileges to perform actions beyond their intended access level. The issue affects versions up to and including 1.2.7. The CVSS 3.1 base score is 4.3, indicating a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, and impacting integrity only. No patch or official remediation guidance has been provided yet.

The vulnerability allows an attacker with some level of privileges to bypass access controls, potentially modifying data or settings improperly (integrity impact). There is no impact on confidentiality or availability. The risk is limited by the requirement for some privileges and the absence of user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict user privileges to the minimum necessary and monitor for unusual activity related to the plugin. Avoid granting elevated privileges to untrusted users.