The vulnerability identified as CVE-2025-22363 affects the Allada T-shirt Designer plugin for Woocommerce by Hermann LAHAMI. It is a missing authorization issue present in versions up to 1.1, which could allow unauthorized users to perform certain actions without proper permission. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or remediation information is currently available.

The vulnerability allows unauthorized access to functionality that should be restricted, potentially leading to limited integrity impact within the affected plugin. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin’s functionality or disabling it if feasible to reduce risk.