The vulnerability is a missing authorization flaw that allows attackers to bypass required permissions when accessing certain actions within the BizPrint plugin. Because the plugin does not enforce proper access control, an adversary could perform operations such as printing documents or configuring the plugin without being authenticated as a privileged user. This breaks the expected confidentiality and integrity safeguards that WordPress site administrators rely on, and is identified as CWE‑862.

WordPress sites that have the BizPrint plugin installed, versions up to and including 4.6.7. The CVE states that this issue is present from an unspecified earlier release through the 4.6.7 release. All users of these versions are potentially affected.

The flaw carries a CVSS score of 6.5, indicating a medium severity risk. The EPSS score of less than 1% suggests that exploitation is not widely observed, and the vulnerability is not listed in the CISA KEV catalog. Nevertheless, the attack vector is likely remote, with a threat actor submitting crafted requests to endpoints that lack proper access checks. The risk remains significant for sites that rely heavily on driver‑ or permission‑based printing workflows.