The vulnerability identified as CVE-2025-66068 affects InstaWP Connect through version 0.1.1.9. It arises from missing authorization checks, which means that certain operations can be performed without proper access control validation. This weakness can be exploited remotely without authentication (AV:N/PR:N/UI:N) and may result in limited integrity and availability impacts. The issue is due to incorrectly configured access control security levels within the product. No vendor advisory or patch information is available at this time.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that compromise the integrity and availability of the affected system. Confidentiality impact is not indicated. There are no reports of active exploitation in the wild. The medium CVSS score reflects a moderate risk level based on the potential impact and ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to mitigate unauthorized access risks. Monitor vendor channels for updates or patches addressing this vulnerability.