The vulnerability identified as CVE-2025-54730 affects the Embedder for Google Reviews product by PARETO Digital. It is a missing authorization issue where certain functionality is accessible without proper ACL enforcement. This flaw exists in versions up to and including 1.7.3. The CVSS 3.1 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but low integrity impact.

Exploitation of this vulnerability allows unauthorized users to perform actions or access functionality that should be restricted, potentially leading to unauthorized modification of data or application behavior. There is no impact on confidentiality or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates and consider restricting access to the affected functionality where possible.