The vulnerability identified as CVE-2025-58029 involves missing authorization checks in the Classic Widgets with Block-based Widgets plugin by Sumit Singh. Specifically, certain functionality is accessible without proper Access Control List (ACL) constraints, potentially allowing unauthorized users to perform actions that should be restricted. The affected versions include all versions up to 1.0.1. The CVSS 3.1 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact.

The vulnerability allows unauthorized users to access and potentially modify functionality within the affected plugin due to missing authorization controls. This could lead to limited integrity impacts such as unauthorized changes to plugin settings or behavior. There is no impact on confidentiality or availability reported. No known exploits are currently observed in the wild.

No official patch or remediation guidance is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should consider restricting access to the plugin's management interfaces and monitor for unusual activity related to the plugin.