The vulnerability CVE-2025-68069 in wpWax Directorist is due to missing authorization checks, resulting in incorrect access control enforcement. This allows an attacker with some privileges (PR:L) to exploit the plugin remotely (AV:N) without user interaction (UI:N). The impact includes limited confidentiality loss (C:L) but high integrity impact (I:H), with no impact on availability (A:N). The affected versions are up to 8.6.6. No official patch or mitigation guidance has been provided in the available data.

An attacker with limited privileges could exploit this vulnerability to perform unauthorized actions that compromise the integrity of the affected system or data. Confidentiality impact is limited, but the integrity impact is high, meaning attackers could modify or manipulate data or functionality. There is no indication of availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in the wpWax Directorist plugin where possible. Monitor for vendor updates and apply patches promptly once released.