The Contextual Related Posts plugin suffers from a missing authorization flaw that allows unauthorized configuration changes, potentially exposing sensitive content or enabling further exploitation; the weakness is an improper access control (CWE‑862).

WordPress sites using WebberZone Contextual Related Posts 4.5.3 or earlier are affected; the vulnerability exists in all versions from the earliest release through 4.5.3 inclusive.

The flaw has a CVSS score of 4.3, indicating moderate risk; EPSS data is not available and the issue is not listed in the CISA KEV catalog. Attack vectors are likely through the WordPress administrative interface or via crafted requests to the plugin’s endpoints, as the deficiency stems from incorrectly configured access control security levels; this inference is drawn from the description stating a missing authorization issue.