The vulnerability CVE-2025-69341 affects BuddhaThemes WeDesignTech Ultimate Booking Addon versions up to 1.0.3. It is caused by missing authorization checks, which result in incorrect access control configurations. This can allow users with limited privileges to perform unauthorized actions, impacting the integrity and availability of the affected system. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. Confidentiality impact is none, integrity impact is low, and availability impact is low.

Exploitation of this vulnerability could allow an attacker with low privileges to perform unauthorized actions within the affected plugin, potentially leading to limited integrity and availability impacts. There is no impact on confidentiality. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor BuddhaThemes communications for updates. Until a fix is available, consider restricting access to the plugin features to trusted users only and review access control configurations to minimize risk.