The vulnerability CVE-2025-47480 affects the Graphina plugin by Iqonic Design up to version 3.0.4. It is caused by missing authorization checks, which result in incorrectly configured access control security levels. This weakness allows an attacker with limited privileges to perform unauthorized actions that could impact the integrity and availability of the affected system. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, but low integrity and availability impacts.

Exploitation of this vulnerability could allow an attacker with some privileges to bypass intended access controls, leading to unauthorized modification or disruption of the affected Graphina plugin's functionality. Confidentiality is not impacted. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations for the Graphina plugin to minimize risk. Monitor vendor channels for updates and apply patches promptly once available.