The vulnerability CVE-2025-22779 in codeaffairs WP News Sliders plugin is due to missing authorization checks, which leads to incorrectly configured access control security levels. This allows users with limited privileges to perform actions that should be restricted, potentially leading to integrity impacts. The affected versions are up to and including 1.0. The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacting integrity only.

The impact is limited to integrity as unauthorized users may be able to perform actions they should not be permitted to, potentially modifying or manipulating plugin data or behavior. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild.

No official patch or vendor advisory is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to trusted users only and monitor for unusual activity related to the WP News Sliders plugin.