The vulnerability identified as CVE-2025-69385 involves missing authorization controls in the Cartify WooCommerce Gutenberg WordPress Theme by AgniHD, specifically in versions up to 1.3. This issue arises from incorrectly configured access control security levels, allowing users with some privileges to perform unauthorized actions that could alter system integrity. The CVSS 3.1 base score is 6.5, reflecting a network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows an attacker with limited privileges to perform unauthorized actions that compromise the integrity of the affected system. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild, indicating limited current exploitation activity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the affected theme to limit privilege escalation risks. Monitor for vendor updates or patches addressing this vulnerability.