The vulnerability CVE-2025-64632 affects the Auctollo Google XML Sitemaps plugin versions up to 4.1.22. It arises from missing authorization controls, allowing unauthenticated attackers to bypass access restrictions and perform unauthorized actions that impact data integrity. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The issue is categorized as an incorrect access control vulnerability but does not compromise confidentiality or availability.

Exploitation of this vulnerability could allow an attacker to make unauthorized changes within the affected plugin, impacting the integrity of sitemap data. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin's administrative interfaces and monitor for unusual activity related to sitemap management. Avoid exposing the plugin to untrusted users.