The vulnerability identified as CVE-2025-66130 affects the etruel WP Views Counter plugin for WordPress, specifically versions up to 2.1.2. It is a missing authorization issue where access control is improperly configured, allowing unauthorized users to perform actions that should require permissions. The CVSS score is 5.3 (medium), reflecting that the vulnerability can be exploited remotely without privileges or user interaction, impacting integrity but not confidentiality or availability. No vendor advisory or patch information is provided, and no exploits are known in the wild at this time.

Exploitation of this vulnerability could allow an attacker to modify data within the WP Views Counter plugin without proper authorization. There is no impact on confidentiality or availability reported. The medium CVSS score reflects the integrity impact and ease of exploitation without privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative functions and monitor for unusual activity related to WP Views Counter. Avoid exposing the plugin's management interfaces to untrusted users.