The Follow My Blog Post WordPress plugin contains a critical missing authorization flaw that permits unauthenticated attackers to interfere with plugin functionality.

This is a missing authorization vulnerability (CWE-862) occurring within the plugin. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms that the vulnerability is exploitable by unauthenticated remote attackers without requiring user interaction.

Successful exploitation of this vulnerability can lead to a denial of service, significantly impacting the availability of the affected WordPress site. Given the CVSS score of 7.5, this is categorized as a High severity issue, as the lack of authentication requirements makes it trivial for remote actors to target the vulnerable endpoint.

Immediate Action: Since no specific patch version is currently confirmed, administrators should immediately deactivate or uninstall the Follow My Blog Post plugin until a vendor-supplied update is released.

Proactive Monitoring: Review web server access logs for anomalous requests targeting the plugin directory or unusual patterns of interaction with the plugin's endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized requests to the plugin's specific vulnerable functions if the plugin must remain active for business continuity.

Public Exploit Available: No (exploit_available: false).

Given the high CVSS score and the fact that this vulnerability is fully automatable by unauthenticated attackers, the risk is significant. Security teams should prioritize the immediate removal or deactivation of the affected plugin to prevent potential service disruption. Monitor the vendor advisory page regularly for the release of a security patch that addresses this authorization bypass.