This vulnerability is a Missing Authorization flaw (CWE-862) in the bPlugins PDF Poster WordPress plugin. It allows an attacker to exploit incorrectly configured access control security levels, enabling unauthorized use of plugin functionality. The result could be unauthorized access to protected data or actions within the site, affecting confidentiality and potentially the integrity of the application. The CVSS score of 5.4 indicates a moderate severity risk from a security standpoint.

The issue affects the PDF Poster plugin from all versions indicated as "n/a" through version 2.4.0. The vulnerability is reported against the bPlugins:PDF Poster product.

The CVSS score is 5.4 and the EPSS score is below 1%, indicating a low probability of existing exploitation in the wild; however, it is still listed in the advisory database rather than the CISA KEV catalog. Attackers would likely need to send crafted HTTP requests to the plugin’s endpoints that expose administrative or privileged actions, bypassing normal authentication checks. The vulnerability can be exploited by users without proper permissions or with minimal user credentials.