The vulnerability identified as CVE-2025-58198 affects Xpro Theme Builder up to version 1.2.9. It is caused by missing authorization checks, which result in incorrectly configured access control security levels. This flaw can be exploited by users with limited privileges (PR:L) over a network (AV:N) without user interaction (UI:N) to cause a high impact on integrity (I:H) but no impact on confidentiality or availability. The vulnerability is unscoped (S:U), meaning it affects the same security scope. The CVSS 3.1 base score is 6.5, classifying it as medium severity. There is no vendor advisory or patch information available at this time.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized actions that compromise the integrity of the system or data managed by Xpro Theme Builder. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in Xpro Theme Builder to ensure proper authorization checks are enforced. Monitor vendor communications for updates on patches or official mitigations.