The vulnerability identified as CVE-2025-64379 affects the Booster for WooCommerce plugin by Pluggabl, specifically versions up to and including 7.4.0. It is a missing authorization issue where access control is improperly configured, allowing users with limited privileges to access functionality that should be restricted. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and requiring low privileges, but no user interaction. The impact is limited to confidentiality loss without integrity or availability impact. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability could allow an attacker with low privileges to gain unauthorized access to certain plugin features or data, resulting in limited confidentiality impact. There is no indication of integrity or availability compromise. No known exploits have been reported in the wild, suggesting limited active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigation steps are provided by the vendor at this time.