The vulnerability CVE-2025-68997 in AdvancedCoding wpDiscuz allows an attacker to bypass authorization controls due to improper configuration of access control security levels. This bypass is achieved through manipulation of a user-controlled key. The affected versions include all releases up to and including 7.6.43. The CVSS 3.1 score of 5.3 reflects a network attack vector with low complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or vendor advisory details are provided in the available data.

Successful exploitation of this vulnerability could allow an attacker to bypass authorization mechanisms, potentially gaining unauthorized access to certain functionalities or data within the wpDiscuz plugin. The impact is limited to confidentiality as per the CVSS vector, with no integrity or availability impact reported. There are no known active exploits targeting this vulnerability at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from AdvancedCoding and consider restricting access to the plugin or disabling it if feasible to reduce exposure.