The vulnerability identified as CVE-2025-59591 affects the wpDiscuz plugin by AdvancedCoding. It involves missing authorization controls due to misconfigured access control security levels, which could allow an attacker with limited privileges to perform unauthorized actions that affect data integrity. The affected versions include all versions up to and including 7.6.33. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact.

The impact of this vulnerability is limited to integrity, meaning unauthorized modifications or actions could be performed within the wpDiscuz plugin environment. There is no impact on confidentiality or availability. The medium severity score reflects the limited scope and impact of the vulnerability. No known exploits have been reported, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the AdvancedCoding vendor advisories for updates. Until a fix is available, review and tighten access control configurations where possible to limit exposure to unauthorized actions.