The vulnerability identified as CVE-2025-64241 involves missing authorization checks in the WP Coupons and Deals plugin (version <= 3.2.4). This improper access control allows users with limited privileges to perform actions that should require higher authorization, leading to integrity impact without affecting confidentiality or availability. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and unchanged scope.

Exploitation of this vulnerability could allow an attacker with limited privileges to modify data within the plugin's scope, potentially affecting the integrity of coupon or deal information. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, it is recommended to monitor the vendor's communications for updates. Until a fix is available, restrict access to trusted users and review plugin permissions carefully to minimize risk.