The vulnerability CVE-2025-64249 in the Protect WP Admin plugin from WP-EXPERTS.IN arises from missing authorization checks, leading to incorrect access control configurations. This flaw affects versions up to and including 4.1. The CVSS score is 4.3 (medium severity) with an attack vector of network, low attack complexity, no privileges required, no user interaction, and impacts availability only. No patch or remediation details have been provided, and no known exploits have been reported.

This vulnerability allows attackers to bypass authorization controls, potentially leading to denial of service or other availability impacts on the affected WordPress admin protection plugin. There is no impact on confidentiality or integrity according to the CVSS vector. No active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor channels for updates. No specific mitigations or workarounds are documented at this time.