The vulnerability identified as CVE-2025-49884 affects the alexvtn Internal Linking of Related Contents plugin versions up to 1.1.8. It is caused by missing authorization controls, which results in incorrect access control enforcement. This allows an unauthenticated attacker to perform actions that should be restricted, potentially impacting the integrity and availability of the affected system. The CVSS v3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on integrity and availability but not confidentiality. There is no indication of known exploits in the wild or vendor-provided patches at this time.

The vulnerability allows unauthorized modification or disruption of the affected plugin's functionality, impacting integrity and availability. Confidential data is not directly compromised. The medium severity score reflects the potential for attackers to alter or disrupt content linking without needing authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from the vendor or trusted security sources. No specific mitigations or workarounds are provided in the available data.