The vulnerability CVE-2025-69032 affects Mikado-Themes FiveStar versions up to 1.7. It allows an attacker with low privileges to bypass authorization controls by manipulating a user-controlled key due to incorrect access control configurations. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and limited availability impact. No patch or official remediation guidance is currently provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with limited privileges to perform unauthorized actions that impact the integrity and availability of the affected system. Confidentiality is not impacted. The vulnerability does not currently have known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor vendor communications for updates. Until a fix is released, consider restricting access to the affected product and reviewing access control configurations to mitigate potential abuse.