The vulnerability identified as CVE-2025-22285 involves missing authorization checks in the Pallet Packaging for WooCommerce plugin by enituretechnology. This issue arises from improperly configured access control, which can be exploited by unauthenticated attackers to perform unauthorized actions that impact the integrity and availability of the affected system. The affected versions include all releases up to 1.1.15. The CVSS v3.0 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized modifications within the affected plugin, potentially impacting the integrity and availability of the WooCommerce environment. There is no confidentiality impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. Applying strict access controls at the environment level may help reduce risk but is not a substitute for an official patch.