The vulnerability CVE-2025-58600 affects the Paid Member Subscriptions plugin by Cozmoslabs, specifically versions up to 2.15.9. It is caused by missing authorization controls, allowing unauthorized users to potentially trigger actions that should be restricted. The CVSS 3.1 base score is 5.3 (medium), with attack vector network, low attack complexity, no privileges required, no user interaction, and impact limited to availability loss. No patch or official fix information is currently provided, and no known exploits have been observed.

The vulnerability does not affect confidentiality or integrity but can result in availability impact. This means attackers might disrupt service or functionality of the Paid Member Subscriptions plugin without gaining access to sensitive data or altering information. No evidence of exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the Paid Member Subscriptions plugin to ensure proper authorization enforcement. Monitor for updates from Cozmoslabs regarding patches or mitigations.