The vulnerability identified as CVE-2025-55712 affects POSIMYTH The Plus Addons for Elementor Page Builder Lite versions up to and including 6.3.13. It is characterized by missing authorization controls, allowing users with some privileges (PR:L) but without user interaction (UI:N) to perform unauthorized actions that compromise integrity (I:H) without affecting confidentiality or availability. The attack vector is network-based (AV:N), and the vulnerability scope is unchanged (S:U). No patch or official remediation guidance is currently available.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized actions that alter or manipulate data or functionality within the affected plugin, impacting system integrity. Confidentiality and availability are not affected according to the CVSS vector. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to the minimum necessary and monitor for unusual activity related to the plugin. Avoid granting elevated permissions to untrusted users within the affected environment.