The vulnerability identified as CVE-2025-49998 affects the Wetail WooCommerce Fortnox Integration plugin for WooCommerce, specifically versions up to and including 4.5.5. It is characterized by missing authorization checks, resulting in incorrect access control configurations. This allows users with limited privileges to perform actions that should be restricted, impacting the integrity and availability of the system. The CVSS 3.1 base score is 5.4, reflecting a network attack vector with low attack complexity, requiring low privileges and no user interaction. Confidentiality impact is none, but integrity and availability impacts are low.

The vulnerability can be exploited remotely by an attacker with low privileges and no user interaction required. It does not affect confidentiality but can lead to unauthorized modifications (integrity impact) and potential disruption of service (availability impact). There are no reports of active exploitation in the wild at this time.

No official patch or remediation information is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, review and tighten access control configurations in the WooCommerce Fortnox Integration plugin to limit exposure. Monitor vendor communications for updates on patches or official fixes.