The vulnerability identified as CVE-2025-67540 affects the Wealcoder Animation Addons for Elementor plugin through missing authorization controls. This improper access control allows users with some privileges to perform unauthorized actions, impacting the integrity of the system. The issue affects all versions up to 2.4.5. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

Exploitation of this vulnerability can lead to unauthorized modification or manipulation of data or functionality within the affected plugin, compromising the integrity of the system. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Wealcoder's official channels for updates. Until a fix is available, restrict access to users with privileges that could exploit this vulnerability and review plugin usage to minimize exposure.