This vulnerability in Ays Pro Advanced Related Posts (<= 1.9.1) is due to missing authorization checks, which results in incorrect access control enforcement. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, integrity impact limited to partial modification, and no availability impact. The issue allows unauthorized users to perform actions that should be restricted, potentially modifying data or settings improperly.

The vulnerability allows unauthorized modification of data or settings within the affected plugin due to missing authorization checks. There is no impact on confidentiality or availability. No known exploits have been reported in the wild, so the practical impact is currently limited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative interfaces and monitor for unusual activity related to Advanced Related Posts. Avoid exposing the plugin to untrusted users.