The vulnerability identified as CVE-2025-24737 affects WP Helper Premium by Mat Bao Corporation. It involves missing authorization controls, enabling unauthenticated users to access certain plugin functionalities that should be restricted. This issue affects versions up to and including 4.6.1. The CVSS 3.1 base score is 6.5, with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and low impact on confidentiality and integrity with no impact on availability. No patch or official remediation information is provided.

The vulnerability allows attackers to access plugin functionality without proper authorization, potentially leading to limited confidentiality and integrity impacts. There is no indication of availability impact or privilege escalation. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations or workarounds are provided in the available data.