The vulnerability identified as CVE-2025-62929 affects PickPlugins Testimonial Slider versions up to 2.0.15. It involves missing authorization checks that allow users with low privileges to access testimonial data improperly. The CVSS 3.1 base score is 6.5, with the vector indicating network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No patch or official vendor advisory is provided, and no exploits are known in the wild.

Successful exploitation could lead to unauthorized disclosure of testimonial data, impacting confidentiality. There is no impact on data integrity or availability. The vulnerability requires low privileges and no user interaction, making it moderately risky but not critical.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Testimonial Slider plugin to trusted users only and monitor for unusual access patterns. Avoid granting unnecessary privileges to users who can interact with the plugin.