The vulnerability identified as CVE-2025-49320 affects FraudLabs Pro for WooCommerce versions up to 2.22.11. It involves missing authorization controls, which means that certain functions or data may be accessible without proper permission checks. This incorrect access control can allow unauthorized users to perform actions that should be restricted, leading to integrity impacts. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable without privileges or user interaction, but it does not affect confidentiality or availability.

The impact is limited to integrity, meaning unauthorized modifications or actions could occur within the affected plugin. There is no direct impact on confidentiality or availability reported. The medium severity score reflects a moderate risk where attackers can exploit the missing authorization to alter data or behavior within the WooCommerce environment using the FraudLabs Pro plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the plugin's administrative functions and reviewing user permissions to minimize exposure.