The vulnerability identified as CVE-2025-58000 affects the Memberful - Membership Plugin for WordPress, specifically versions up to 1.75.0. It is characterized by missing authorization checks, which means that some functionality is accessible without proper ACL enforcement. According to the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), the vulnerability can be exploited remotely without privileges or user interaction, resulting in a low complexity attack that impacts data integrity but not confidentiality or availability.

The impact is limited to integrity, meaning unauthorized users may be able to perform actions or modify data that should be restricted. There is no direct impact on confidentiality or availability reported. The vulnerability can be exploited remotely without authentication or user interaction, increasing the risk of unauthorized integrity modifications in affected installations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the plugin's functionality through other means such as network controls or WordPress role management to limit exposure.