The vulnerability CVE-2025-62928 affects the SEO Meta Description Updater plugin by Joby Joseph, specifically versions up to 1.2.0. It is caused by missing authorization checks, which means that users with low privileges (PR:L) can exploit incorrectly configured access control to perform unauthorized actions. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring privileges but no user interaction, and impacting integrity only. No patch or vendor advisory is currently available, and no exploits are known in the wild.

The impact is limited to integrity, meaning unauthorized modification of SEO meta descriptions or related data is possible by users with limited privileges. There is no impact on confidentiality or availability. This could affect the accuracy or trustworthiness of SEO metadata but does not directly compromise sensitive data or system uptime.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict user privileges carefully and monitor for unauthorized changes to SEO meta descriptions. Avoid granting unnecessary permissions to users who do not require them for their role.