This vulnerability involves missing authorization checks in the Endless Posts Navigation plugin (versions up to 2.2.9), which allows unauthorized users to perform actions that should be restricted. The CVSS score is 5.3 (medium severity) with an attack vector of network, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized modification or manipulation of plugin functionality due to missing authorization controls, potentially affecting data integrity. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, restrict access to the plugin's administrative functions and monitor for unusual activity related to the plugin. Avoid exposing the plugin to untrusted users.