The vulnerability identified as CVE-2025-59001 affects ThemeNectar's Salient Core plugin through version 3.0.8. It is due to missing authorization controls, which means that certain functions or actions within the plugin can be accessed or executed without proper permission checks. This can lead to unauthorized modification or manipulation of data or settings within the affected product. The CVSS score is 4.3 (medium), reflecting a network attack vector with low complexity, requiring low privileges and no user interaction, impacting integrity but not confidentiality or availability.

The impact of this vulnerability is limited to integrity, as unauthorized users with some privileges can perform actions they should not be allowed to. There is no impact on confidentiality or availability. No known exploits are currently reported, so the risk is theoretical at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the Salient Core plugin to trusted users only and monitor for any unusual activity related to plugin functions. Avoid granting unnecessary privileges to users who can interact with the plugin.