The vulnerability identified as CVE-2025-60103 affects the ListingPro plugin by CridioStudio, specifically versions up to 2.9.8. It involves missing authorization controls that permit exploitation of improperly configured access control security levels. The CVSS 3.1 base score is 5.4, indicating a medium severity issue with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact includes potential integrity and availability degradation but no confidentiality loss. No patch or official remediation guidance is currently documented.

Exploitation of this vulnerability can lead to unauthorized actions that affect the integrity and availability of the ListingPro plugin's functionality. Confidentiality is not impacted. Attackers with low privileges can exploit the missing authorization to perform actions beyond their intended permissions, potentially disrupting service or altering data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in ListingPro to ensure proper authorization enforcement. Monitor for any updates from CridioStudio regarding patches or official mitigations.