The vulnerability identified as CVE-2025-54005 involves missing authorization checks in the sonalsinha21 SKT Page Builder plugin (versions up to 4.9). This results from incorrectly configured access control security levels, enabling users with limited privileges to perform actions beyond their intended permissions. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring privileges but no user interaction, and impacts integrity without affecting confidentiality or availability. There is no vendor advisory or patch information provided, and the product is not a cloud service.

The impact is limited to integrity as unauthorized actions could be performed by users with some privileges due to missing authorization controls. There is no impact on confidentiality or availability according to the CVSS vector. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations for the SKT Page Builder plugin to limit privilege escalation opportunities. Monitor for updates from the vendor or security advisories for a patch or official mitigation.