The vulnerability identified as CVE-2025-69348 affects CoolHappy's The Events Calendar Countdown Addon, specifically versions up to and including 1.4.15. It is characterized by missing authorization checks, which means that users with limited privileges (PR:L) can exploit incorrectly configured access control security levels to perform unauthorized actions. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, no user interaction required, and impact limited to integrity. There is no indication of confidentiality or availability impact. No patch or official fix information is available at this time.

The vulnerability allows unauthorized modification or manipulation of data within the addon due to missing authorization controls, impacting data integrity. There is no impact on confidentiality or availability. Exploitation requires network access and low complexity but limited privileges are needed. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations where possible to limit exposure. Monitor for vendor updates regarding patches or official mitigations.