The vulnerability identified as CVE-2025-68009 affects Codeless Slider Templates up to version 1.0.3. It is caused by missing authorization checks in the slider-templates component, which allows attackers to access functionality that should be restricted by ACLs. The CVSS vector indicates that the attack can be performed remotely without privileges or user interaction, resulting in integrity and availability impacts. There is no evidence of known exploits in the wild, and no patch or vendor advisory information is currently available.

Exploitation of this vulnerability could allow an unauthenticated attacker to access and potentially manipulate functionality within the Slider Templates plugin that should be protected. This may lead to limited integrity and availability issues, such as unauthorized modifications or disruptions of slider content or behavior. Confidentiality is not impacted according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin and monitor for unusual activity related to slider templates. Avoid exposing the affected functionality to untrusted users.