A missing authorization vulnerability in bPlugins PDF Poster up to version 2.4.1 allows exploitation of incorrectly configured access control security levels. This flaw can lead to unauthorized information disclosure but does not impact integrity or availability.