This vulnerability in Ajay Contextual Related Posts (versions prior to 4.2.2) is caused by missing authorization checks, resulting in incorrect access control configurations. An attacker can exploit this flaw remotely without authentication or user interaction to gain limited access to confidential information. The CVSS 3.1 base score is 5.3, reflecting a medium severity impact focused on confidentiality loss. No official patch or vendor advisory is currently available, and no exploits have been observed in the wild.

The vulnerability allows unauthorized remote attackers to access certain confidential information due to missing authorization controls. It does not impact integrity or availability. The medium severity rating and CVSS score of 5.3 indicate a moderate confidentiality impact without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigation steps are provided in the available data.