The vulnerability CVE-2025-58601 affects RadiusTheme Classified Listing plugin versions up to 5.0.6. It is due to missing authorization controls, which means that certain actions or resources may be accessible without proper permission checks. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No patch or vendor advisory is currently available, and the product is not a cloud service.

An attacker with low privileges can exploit this missing authorization to perform unauthorized actions that affect the integrity of the Classified Listing system. There is no impact on confidentiality or availability. The vulnerability does not appear to be actively exploited in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor RadiusTheme communications for updates. Until a fix is available, review and tighten access control configurations where possible to limit exposure.