The vulnerability identified as CVE-2025-69185 affects e-plugins Hotel Listing versions up to 1.4.2. It arises from missing authorization checks, enabling exploitation of incorrectly configured access control security levels. This can lead to unauthorized access or modification of data within the affected application. The CVSS 3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to bypass access controls, potentially leading to unauthorized disclosure, modification, or disruption of data managed by the Hotel Listing application. The CVSS vector indicates that the attack can be performed remotely without authentication or user interaction, increasing the risk. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to mitigate unauthorized access risks. Monitor vendor channels for updates regarding patches or official mitigations.