The vulnerability identified as CVE-2025-68593 affects the WP Adminify plugin for WordPress, specifically versions up to 4.0.6.1. It is caused by missing authorization checks, which result in incorrectly configured access control security levels. This allows users with limited privileges to perform actions that should be restricted, impacting the integrity and availability of the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but integrity and availability impacts are present.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized actions that affect the integrity and availability of the WP Adminify plugin or the WordPress environment it is installed on. There is no confidentiality impact reported. No known exploits in the wild have been documented at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from the vendor and consider restricting access to the WP Adminify plugin functionalities to trusted users only.