The vulnerability identified as CVE-2025-58650 affects the All In One SEO Pack plugin by Syed Balkhi. It is caused by missing authorization checks, which result in incorrect access control configurations. This can allow users with limited privileges to perform actions that should be restricted, impacting the integrity and availability of the affected system. The issue affects all versions up to 4.8.7.1. The CVSS 3.1 base score is 5.4, reflecting a network attack vector with low attack complexity, requiring privileges but no user interaction, and resulting in integrity and availability impacts.

Exploitation of this vulnerability could allow an attacker with some level of privileges to perform unauthorized actions within the All In One SEO Pack plugin, potentially leading to integrity and availability issues. There is no evidence of confidentiality impact. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, review and tighten access controls and permissions related to the plugin to minimize risk.