The vulnerability CVE-2025-62954 affects the rsocial Revive Old Posts plugin up to version 9.3.3. It is a missing authorization issue in the tweet-old-post functionality, where access control security levels are incorrectly configured. This allows an attacker with some privileges (PR:L) but no user interaction (UI:N) to perform actions that could alter data integrity (I:L) without affecting confidentiality or availability. The CVSS score is 4.3 (medium severity), reflecting a network attack vector with low complexity and limited privileges required.

The impact is limited to integrity, meaning an attacker could modify or manipulate data or functionality within the affected plugin without proper authorization. There is no impact on confidentiality or availability. No known exploits have been reported, so the practical risk may be limited until exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict access to the affected plugin's functionalities to trusted users only and review user privileges to minimize risk.