The vulnerability identified as CVE-2025-58663 affects the Themeum Qubely plugin (versions up to 1.8.14) and is characterized by missing authorization controls. This results from incorrectly configured access control security levels, which may allow users with limited privileges to perform unauthorized actions that could alter system integrity. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low privileges required and no user interaction needed, impacting integrity but not confidentiality or availability. No vendor advisory or patch information is currently available, and no exploits have been reported in the wild.

The vulnerability impacts the integrity of affected systems by allowing unauthorized modification actions due to missing authorization checks. There is no impact on confidentiality or availability reported. The medium severity score indicates a moderate risk that could lead to unauthorized changes within the system if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the Qubely plugin to limit potential unauthorized actions. Monitor for vendor updates regarding patches or official mitigations.