The vulnerability CVE-2025-69340 affects BuddhaThemes WeDesignTech Ultimate Booking Addon versions up to 1.0.3. It arises from missing authorization checks, which means that the addon does not properly enforce access control security levels. This allows an attacker to access functionality or data without proper permissions. The CVSS 3.1 base score of 7.5 reflects that the vulnerability is exploitable remotely over the network without privileges or user interaction and can lead to high confidentiality impact, though integrity and availability are not affected. No patch or official fix has been documented, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information managed by the WeDesignTech Ultimate Booking Addon, compromising confidentiality. There is no indication of impact on integrity or availability. Since no privileges or user interaction are required, the risk of exploitation is elevated. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected addon and monitor for updates from BuddhaThemes. No vendor advisory or patch links are currently available, so no official remediation steps can be recommended beyond awaiting a vendor fix.