The vulnerability CVE-2025-58710 in e-plugins Hotel Listing plugin is due to incorrect privilege assignment, which enables privilege escalation. Affected versions include all releases up to 1.4.0. The CVSS 3.1 base score of 8.8 reflects a network-accessible flaw with low complexity and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates or user-applied fixes.

Successful exploitation of this vulnerability could allow an attacker with some level of access to escalate their privileges, potentially gaining full control over the affected system or application. This can lead to complete compromise of confidentiality, integrity, and availability of the Hotel Listing plugin environment. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. Consider restricting access to the affected plugin and limiting user privileges as a temporary measure to reduce risk.