The vulnerability identified as CVE-2025-62019 affects the WPZOOM Recipe Card Blocks plugin for Gutenberg & Elementor, specifically versions up to 3.4.8. It is categorized as a Missing Authorization issue, meaning the plugin fails to properly verify whether a user is authorized to perform certain actions or access specific features. The CVSS v3.1 base score is 6.5, with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and low impact on confidentiality and integrity, with no impact on availability. No patch or remediation information is currently available, and no exploits have been reported.

Unauthorized users may be able to perform actions or access features within the WPZOOM Recipe Card Blocks plugin that should require authorization, potentially leading to partial confidentiality and integrity impacts. The vulnerability does not affect availability. The medium CVSS score reflects these limited but meaningful impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor WPZOOM communications for updates and consider limiting exposure of the affected plugin if possible.