The vulnerability identified as CVE-2025-32240 affects the wpvsingh Site Notify plugin up to version 1.0. It is caused by missing authorization checks, which result in improperly configured access control. This allows unauthenticated attackers to perform actions that should require authorization, impacting the integrity and availability of the affected system. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with no confidentiality impact but limited integrity and availability impact.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions within the Site Notify plugin, potentially altering data or disrupting service availability. There is no confidentiality impact reported. The medium CVSS score reflects these limited but meaningful impacts on integrity and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is provided, users should monitor for updates from the vendor or trusted security sources. Until a fix is available, restricting access to the plugin's functionality or disabling it if not essential may reduce risk.