The vulnerability CVE-2025-68022 in the soporteblue Plugin BlueX for WooCommerce is due to missing authorization controls, which results in incorrectly configured access control security levels. This allows unauthorized users to potentially access or manipulate resources they should not have permission to. The affected versions include all versions up to 3.1.6. The CVSS score of 7.3 reflects that the vulnerability can be exploited remotely without privileges or user interaction, and it impacts confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided by the vendor or in public advisories.

Exploitation of this vulnerability could allow an attacker to bypass access controls, leading to unauthorized disclosure, modification, or disruption of data or functionality within the affected plugin. The impact affects confidentiality, integrity, and availability as indicated by the CVSS vector. However, there are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor for updates from soporteblue and apply patches promptly once released. Review and tighten access control configurations where possible to limit exposure.