The vulnerability identified as CVE-2025-24734 affects CodeSolz Better Find and Replace plugin (<= 1.6.7). It is caused by missing authorization checks in the real-time-auto-find-and-replace functionality, which enables privilege escalation. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability allows an attacker with limited privileges to escalate their privileges, potentially gaining higher-level access to the system. This can lead to full compromise of the affected environment's confidentiality, integrity, and availability. No known exploits are reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for suspicious privilege escalation attempts. Avoid granting unnecessary privileges to users who can access this plugin.