The vulnerability identified as CVE-2025-62747 affects the Featured Image Generator plugin by Aum Watcharapon, specifically versions up to 1.3.4. It is caused by missing authorization checks, which means that access control mechanisms are improperly configured, allowing unauthorized users to perform actions that should require permission. According to the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), the vulnerability is remotely exploitable without privileges or user interaction and impacts the integrity of the system but not confidentiality or availability.

The impact of this vulnerability is limited to integrity, meaning an attacker could potentially alter data or functionality within the Featured Image Generator plugin without authorization. There is no impact on confidentiality or availability. No known exploits have been reported in the wild, reducing immediate risk. However, the lack of authorization controls could be leveraged in targeted attacks if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restricting access to the plugin's functionality through other means (e.g., network controls or application-level restrictions) may reduce exposure.