CVE-2020-36831

CVE-2020-36831 describes an authorization bypass vulnerability in the NextScripts: Social Networks Auto-Poster plugin for WordPress, affecting versions up to and including 4.3.17. This flaw allows low-privileged users, such as subscribers, to execute actions typically restricted to administrative accounts due to missing capability checks. Rated as Medium severity with a CVSS score of 6.5, the vulnerability has a low attack complexity and can lead to high integrity impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.