The vulnerability CVE-2025-62087 in Web Builder 143's Sticky Notes for WP Dashboard plugin is due to missing authorization checks, which can be exploited by users with low privileges to bypass access control restrictions. This issue affects all versions up to 1.2.4. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, required privileges, no user interaction, and limited confidentiality impact without integrity or availability impact. No patch or mitigation details have been provided by the vendor or in public advisories.

The impact is limited to a confidentiality loss due to missing authorization, potentially allowing unauthorized access to some data or functionality within the plugin. There is no reported impact on data integrity or system availability. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin to trusted users only and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges that could be leveraged to exploit this vulnerability.