The vulnerability identified as CVE-2025-22694 affects the Hide Shipping Method For WooCommerce plugin by Dotstore. It is classified as a missing authorization issue, meaning that certain operations related to hiding shipping methods can be executed without proper permission checks. This affects versions up to 1.5.1. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact.

An attacker with low privileges could exploit this vulnerability to alter shipping method visibility settings without proper authorization. This could lead to unauthorized changes in the e-commerce shipping configuration, potentially affecting order processing or customer experience. There is no indication of confidentiality or availability impact, and no known active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict plugin access to trusted administrators only and monitor for unusual changes in shipping method configurations. Avoid granting unnecessary privileges to users who can manage shipping methods.