The vulnerability CVE-2025-54705 affects the magepeopleteam WpEvently plugin for WordPress up to version 4.4.6. It is characterized by missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The CVSS 3.1 base score is 4.3 (medium), with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact is limited to availability loss, with no confidentiality or integrity impact reported. No patch or vendor advisory is currently provided, and no known exploits have been observed.

The vulnerability can lead to availability impact due to missing authorization controls, potentially allowing unauthorized users with low privileges to perform actions that disrupt service. There is no impact on confidentiality or integrity. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor magepeopleteam communications for updates. In the meantime, restricting access to the plugin's administrative functions and limiting user privileges may reduce exposure.