The vulnerability identified as CVE-2025-31886 affects the Repuso Social proof testimonials and reviews plugin (versions up to 5.21). It is caused by missing authorization checks, resulting in incorrectly configured access control security levels. This allows attackers with low privileges to perform unauthorized actions that impact the integrity of the system, although confidentiality and availability are not affected. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, required privileges, no user interaction, and impact limited to integrity.

The impact of this vulnerability is limited to integrity, meaning an attacker with low privileges could modify or manipulate testimonial or review data without proper authorization. There is no impact on confidentiality or availability. No known exploits have been reported in the wild, indicating limited active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations for the affected plugin to limit unauthorized modifications. Monitor for vendor updates regarding patches or official mitigations.