The vulnerability identified as CVE-2025-68022 involves missing authorization checks in the soporteblue Plugin BlueX for WooCommerce (versions ≤ 3.1.6). This improper access control allows users with limited privileges to perform actions that should require higher authorization. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and low impact on confidentiality, integrity, and availability.

Exploitation of this vulnerability could allow an attacker with limited privileges to bypass intended access controls, potentially leading to unauthorized information disclosure, modification, or disruption of service within the WooCommerce environment using this plugin. The impact is rated as medium severity, reflecting limited but meaningful risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the plugin's administrative functions to trusted users only.