The vulnerability identified as CVE-2025-26975 affects the Strong Testimonials plugin by WP Chill, specifically versions up to 3.2.3. It is characterized by missing authorization checks that allow unauthenticated users to access certain functions without proper ACL enforcement. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. No patch or vendor advisory is currently available, and no exploits have been reported.

Unauthorized users can access and potentially modify functionality within the Strong Testimonials plugin that should be restricted, leading to integrity issues. There is no impact on confidentiality or availability. The medium severity score indicates a moderate risk that could affect the integrity of testimonial data or plugin behavior if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from WP Chill and consider restricting access to the plugin's functionality through other means such as web application firewalls or limiting user roles. No official patch or temporary fix is currently documented.