CVE-2025-68980 describes a missing authorization vulnerability in designthemes WeDesignTech Portfolio up to version 1.0.2. The issue arises from incorrectly configured access control security levels, which could allow an unauthenticated attacker to perform unauthorized actions that impact data integrity. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact present. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

The vulnerability allows unauthorized modification of data due to missing authorization controls, impacting the integrity of the affected system. There is no impact on confidentiality or availability. Since no known exploits are reported, the risk is theoretical but should be addressed to prevent potential misuse.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in WeDesignTech Portfolio to ensure proper authorization enforcement. Monitor for vendor updates or patches addressing this vulnerability.