The vulnerability CVE-2025-52775 in Ronik@UnlimitedWP Project Cost Calculator arises from missing authorization checks, resulting in incorrectly configured access control security levels. This flaw allows users with low privileges to execute unauthorized actions, potentially compromising the integrity of the application and causing high impact on availability. The issue affects all versions up to and including 1.0.0. The CVSS v3.1 base score is 7.1, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No patch or vendor advisory is currently available, and the product is not a cloud service.

Exploitation of this vulnerability can lead to unauthorized modification or disruption of the Project Cost Calculator's functionality, impacting the integrity and availability of the affected system. Confidentiality is not impacted. The high severity score reflects the potential for significant disruption if exploited. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin to trusted users only and monitor for unusual activity related to access control. Avoid granting unnecessary privileges to users within the affected system.