The vulnerability identified as CVE-2025-54712 affects the Easy Elementor Addons plugin by hashthemes. It is characterized by missing authorization controls, meaning that access control mechanisms are improperly configured, allowing users with some privileges to perform actions they should not be authorized to do. This issue impacts versions up to 2.2.7. The CVSS v3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. No patch or official fix information is provided, and no known exploits have been reported.

The vulnerability allows users with limited privileges to perform unauthorized actions due to missing authorization checks. While it does not impact confidentiality or availability, it can lead to integrity issues within the affected system. The medium severity score reflects this limited but meaningful risk. There are no reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor for updates from hashthemes regarding Easy Elementor Addons. Until a fix is available, restricting user privileges and minimizing exposure of the affected plugin may reduce risk.