This vulnerability in the Advanced Related Posts plugin (Ays Pro) arises from missing authorization checks, which results in incorrect access control configurations. The issue affects all versions up to and including 1.9.1. The CVSS score is 5.3 (medium), reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported. No vendor advisory or patch information is currently available, and no exploits are known in the wild.

The vulnerability allows an attacker to exploit missing authorization controls, potentially leading to unauthorized modification or manipulation of data within the affected plugin. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations related to the Advanced Related Posts plugin where possible. Monitor vendor channels for updates and apply patches promptly once available.