The vulnerability identified as CVE-2025-63022 affects the Simple Like Page plugin from topdevs.net up to version 1.5.3. It is caused by missing authorization checks, which results in incorrectly configured access control security levels. This allows unauthorized users to perform actions that should require authorization, potentially leading to integrity violations. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and impact limited to integrity.

The impact of this vulnerability is limited to integrity, meaning unauthorized modifications or actions could be performed within the affected plugin. There is no impact on confidentiality or availability. No known exploits have been reported in the wild, reducing immediate risk. However, the lack of authorization could allow attackers to manipulate plugin behavior or data in unauthorized ways.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restricting access to the plugin or disabling it if not essential may reduce exposure.