The vulnerability identified as CVE-2026-25012 affects the WP Bannerize Pro WordPress plugin by gfazioli. It involves missing authorization checks, which means that access control mechanisms are incorrectly configured, potentially allowing unauthorized access to certain plugin functionalities. This issue affects all versions up to and including 1.11.0. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, no user interaction needed, and limited confidentiality impact. No integrity or availability impacts are noted. There is no vendor advisory or patch information available to confirm remediation status.

The impact of this vulnerability is limited to a confidentiality breach, as unauthorized users may gain access to information or functionality that should be restricted. There is no indication of impact on data integrity or system availability. Since the vulnerability is due to missing authorization, it could allow attackers to bypass access controls within the plugin, but the exact scope of accessible data or actions is not detailed. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's administrative interfaces and monitor for updates from the vendor. Avoid exposing the affected plugin functionalities to untrusted users. No official patch or workaround information is currently available.