CVE-2025-53208 describes an authorization bypass vulnerability in the paymayapg Maya Business WooCommerce plugin (paymaya-checkout-for-woocommerce) up to version 1.2.0. The issue arises from insufficient access control checks on functionality accessed via a user-controlled key, allowing attackers to perform unauthorized actions. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No official patch or vendor advisory is currently available.

The vulnerability allows attackers to bypass authorization controls and access or manipulate functionality that should be restricted, potentially compromising the integrity of the affected system. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the affected plugin and monitor for suspicious activity related to unauthorized use of functionality. Avoid exposing the vulnerable plugin to untrusted users where possible.