The vulnerability identified as CVE-2025-54730 affects the Embedder for Google Reviews plugin by PARETO Digital. It is caused by missing authorization checks, which allow unauthorized access to certain functionalities that should be protected by ACLs. This issue impacts all versions up to and including 1.7.3. The CVSS 3.1 base score is 5.3, reflecting a medium severity level with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to integrity loss without confidentiality or availability impact.

An attacker can access functionality within the affected plugin that should be restricted, potentially leading to unauthorized actions that impact the integrity of the system or data. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently referenced, users should monitor for updates from PARETO Digital. Until a fix is available, consider restricting access to the plugin's functionality through other means if possible.