The vulnerability identified as CVE-2025-69340 affects BuddhaThemes WeDesignTech Ultimate Booking Addon up to version 1.0.3. It is due to missing authorization controls, which means that certain actions or resources can be accessed without proper permission checks. The CVSS 3.1 base score is 7.5, reflecting a high severity primarily due to the network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to availability, with no confidentiality or integrity loss indicated. The vulnerability is publicly disclosed but lacks a vendor-provided patch or official fix at this time.

An attacker can exploit the missing authorization to perform unauthorized actions that disrupt the availability of the affected system or service. There is no evidence from the provided data that confidentiality or integrity are impacted. The vulnerability can be exploited remotely without authentication or user interaction, increasing the risk of availability disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, users should monitor vendor communications for updates. Until a fix is released, consider restricting access to the affected addon or implementing compensating controls to limit exposure.