This vulnerability (CVE-2025-62081) in the Live Shopping & Shoppable Videos For WooCommerce plugin arises from missing authorization checks, which results in incorrect access control configurations. This flaw allows unauthorized users to perform actions that should be restricted, potentially leading to integrity violations. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and impact limited to integrity. The affected versions include all versions up to and including 2.2.0. No patch or vendor advisory is currently available.

The impact is limited to integrity, meaning unauthorized modifications or actions could be performed within the affected plugin. There is no impact on confidentiality or availability. Since no known exploits are reported, the risk is currently theoretical but should be addressed to prevent potential misuse.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and restrict access to the plugin's administrative functions and monitor for unusual activity related to live shopping or shoppable video features. Avoid exposing the plugin to untrusted users. Follow vendor updates closely for an official fix.