The vulnerability CVE-2025-68005 affects themewant Easy Hotel Booking plugin versions up to 1.9.0. It is caused by missing authorization checks due to incorrectly configured access control security levels. This allows users with limited privileges to perform unauthorized actions, impacting the integrity of the system. The CVSS score of 6.5 reflects a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, and no confidentiality or availability impact but high integrity impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized modification or manipulation of data or functionality within the Easy Hotel Booking plugin due to missing authorization checks. It does not affect confidentiality or availability but can compromise the integrity of the system. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict access to trusted users only and review access control configurations to minimize risk.