CVE-2025-60086 describes a Missing Authorization vulnerability in the WP Voting Contest WordPress plugin (versions up to 5.8). The issue arises from incorrectly configured access control security levels, allowing attackers to perform unauthorized actions that compromise the integrity of the plugin's functionality. The vulnerability can be exploited remotely without authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). No patch or official fix information is provided in the available data, and no known exploits have been observed in the wild. The vulnerability is classified as high severity due to its potential impact on integrity.

The vulnerability allows attackers to bypass authorization controls, leading to unauthorized modification or manipulation within the WP Voting Contest plugin. This impacts the integrity of the affected system or data but does not affect confidentiality or availability. Since no known exploits are reported, the immediate risk may be limited, but the potential for unauthorized actions remains significant.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the plugin's functionality or disabling it if possible to reduce exposure.