The vulnerability identified as CVE-2025-23529 affects the blokhauswp Minterpress plugin, specifically versions up to 1.0.5. It is characterized by missing authorization controls, enabling users with low privileges to access functionality that is not properly constrained by ACLs. According to the CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), the attack can be performed remotely over the network with low attack complexity, requiring privileges but no user interaction, and results in a high impact on availability without affecting confidentiality or integrity. No known exploits are reported, and no patch or official remediation guidance is currently available.

The vulnerability allows an attacker with limited privileges to access functionality that should be restricted, potentially leading to a denial of service or other availability disruptions. There is no impact on confidentiality or integrity according to the CVSS metrics. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual activity related to Minterpress functionality. Avoid granting unnecessary privileges to users to reduce risk.