The vulnerability identified as CVE-2025-69093 affects the ShopMagic plugin for WooCommerce by wpdesk. It is a missing authorization issue where access control is improperly configured, allowing unauthorized users to perform actions that should require authorization. This affects ShopMagic versions up to 4.7.2. The vulnerability has a medium severity with a CVSS 3.1 base score of 5.3, characterized by network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity without affecting confidentiality or availability. No patch or official fix information is currently available, and no known exploits have been reported.

The vulnerability allows unauthorized users to exploit access control weaknesses, potentially leading to unauthorized modification of data within the ShopMagic plugin environment. There is no impact on confidentiality or availability reported. The medium severity score reflects the potential for integrity compromise without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the ShopMagic plugin administration interfaces and monitor for unusual activity. Avoid deploying affected versions in sensitive environments if possible.