This vulnerability (CVE-2025-66076) in the Woostify Sites Library (versions <= 1.6.2) is classified as CWE-862, indicating missing authorization controls. It allows unauthenticated attackers to bypass access restrictions, potentially leading to unauthorized modification or interaction with the application. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

The vulnerability allows unauthenticated attackers to bypass authorization controls, potentially leading to unauthorized integrity modifications within the affected application. There is no impact on confidentiality or availability according to the CVSS vector. Exploitation could result in unauthorized changes or actions that should be restricted.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor vendor communications for updates. Until a patch is released, consider restricting access to the affected component or implementing additional access control measures externally if feasible.