The vulnerability identified as CVE-2025-24584 affects the Ultimate Store Kit Elementor Addons plugin by bdthemes. It involves missing authorization controls, which means that users with some level of access (privileged users) may perform actions that should be restricted. The issue is present in versions up to 2.3.0. The CVSS score of 4.3 reflects a medium severity, with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. No patch or official fix information is currently available.

The impact is limited to integrity, meaning unauthorized changes or modifications could be made by users with some privileges due to improper access control. There is no reported impact on confidentiality or availability. No known exploits have been observed in the wild, indicating limited current exploitation risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, restrict user privileges to the minimum necessary and monitor for unusual activity related to this plugin. Avoid granting unnecessary privileges to users who can interact with the Ultimate Store Kit Elementor Addons plugin.