The vulnerability identified as CVE-2025-68028 affects the GA4WP: Google Analytics for WordPress plugin by Passionate Brains. It is caused by missing authorization checks, which allow unauthorized users to exploit access control misconfigurations. This can result in limited integrity and availability impacts. The issue affects all versions up to and including 2.10.0. There is no vendor advisory or patch information currently available, and no known active exploitation has been reported.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform actions that should require authorization, potentially leading to limited integrity and availability impacts on the affected WordPress plugin. There is no indication of confidentiality impact. The medium CVSS score reflects these limited but non-negligible consequences.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Passionate Brains and consider restricting access to the plugin's administrative functions as a precaution.