The vulnerability identified as CVE-2025-22643 affects famethemes OnePress theme versions up to 2.3.11. It is characterized by missing authorization controls, which means certain actions or resources may be accessed or modified without proper permission checks. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges, without user interaction. The impact is limited to integrity loss, with no confidentiality or availability impact reported. No patch or official remediation information is currently available.

Exploitation of this vulnerability could allow an attacker with low privileges to perform unauthorized actions that affect the integrity of the affected system or data. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from famethemes and apply any security patches promptly once available. No vendor advisory or patch links are currently provided.