The vulnerability CVE-2025-69187 in e-plugins Final User (<= 1.2.5) is caused by missing authorization checks, resulting in incorrect access control enforcement. This allows an attacker to potentially access or modify resources without proper permissions. The CVSS v3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or mitigation details are provided in the available data.

Exploitation of this vulnerability could allow an unauthenticated attacker to bypass access controls, leading to partial loss of confidentiality, integrity, and availability of the affected system. The impact is rated high based on the CVSS score of 7.3. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in the affected Final User installations to minimize exposure.