The vulnerability identified as CVE-2025-69385 affects the Cartify - WooCommerce Gutenberg WordPress Theme by AgniHD. It is caused by missing authorization checks, which result in incorrect access control configurations. This allows users with limited privileges to access resources or perform actions they should not be authorized to, impacting confidentiality but not integrity or availability. The issue affects all versions up to and including 1.3. No official patches or vendor advisories are currently available to confirm remediation status.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information due to missing authorization controls. The CVSS vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and harden access control configurations in the affected theme. Limit user privileges to the minimum necessary and monitor for unusual access patterns related to the theme's functionality.