The vulnerability identified as CVE-2025-47529 affects the Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin by UX Design Experts. It is caused by missing authorization checks, which means that the plugin does not properly enforce access control security levels. This can allow unauthorized users to perform actions that should be restricted, impacting the integrity and availability of the affected system. The issue affects versions up to and including 1.1.1. The CVSS 3.1 base score is 6.5, with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but limited integrity and availability impact. There is no vendor advisory or patch link provided, and no known exploits have been reported.

Exploitation of this vulnerability can lead to unauthorized modification or disruption of the plugin's functionality, affecting the integrity and availability of the system using the Experto CTA Widget. Confidentiality is not impacted. The medium severity score reflects these limited but meaningful impacts. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is referenced, users should monitor the vendor's communications for updates. Until a fix is available, restricting access to the plugin's administrative interfaces and minimizing exposure may reduce risk.