The vulnerability identified as CVE-2025-54679 affects the vertim Neon Channel Product Customizer Free plugin (version 2.0 and earlier). It is a Missing Authorization issue caused by incorrectly configured access control security levels, which can be exploited remotely without privileges or user interaction. The CVSS 3.1 base score is 7.5, reflecting a high severity primarily due to the potential for availability impact. No patch or official fix has been documented, and the product is not a cloud service, so remediation depends on vendor updates.

The impact of this vulnerability is a high severity availability impact, meaning an attacker could disrupt the availability of the affected product. There is no reported confidentiality or integrity impact. No known exploits exist in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor for vendor updates and apply any released patches promptly. Until a fix is available, restricting access to the affected plugin or disabling it if feasible may reduce risk.