The vulnerability identified as CVE-2025-62079 affects the Damian WP Export Categories & Taxonomies WordPress plugin through version 1.0.3. It is caused by missing authorization checks, which means that the plugin does not properly enforce access control on certain operations. This allows an unauthenticated attacker to perform actions that should require authorization. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and limited confidentiality impact. No integrity or availability impacts are noted. The vulnerability is published and reserved as of late 2025, but no patch or official remediation guidance is currently available.

An attacker can exploit this vulnerability remotely without authentication to access functionality that should be restricted, potentially leading to unauthorized information disclosure limited to confidentiality impact. There is no indication of integrity or availability impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's functionality by limiting user roles and permissions where possible. Monitor for updates from the vendor or trusted security sources regarding patches or mitigations.