The vulnerability CVE-2025-66101 affects the Sabuj Kundu CBX Bookmark & Favorite plugin up to version 2.0.1. It is a missing authorization issue where access control security levels are incorrectly configured, allowing users with low privileges to perform unauthorized actions that impact data integrity. The CVSS score is 4.3 (medium), reflecting low complexity and no user interaction required, but limited impact confined to integrity without confidentiality or availability effects. No known exploits are reported in the wild, and no patch or remediation information is currently provided.

An attacker with low privileges can exploit this missing authorization vulnerability to perform unauthorized modifications within the affected plugin. There is no impact on confidentiality or availability. The overall impact is limited to integrity, potentially allowing unauthorized changes to bookmarks or favorites managed by the plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor vendor communications for updates. Until a fix is released, restrict access to trusted users and review plugin permissions to minimize exposure.