The vulnerability identified as CVE-2026-25396 affects the Commerce Coinbase For WooCommerce plugin by CoderPress. It is a Missing Authorization issue where access control is incorrectly configured, allowing unauthenticated remote attackers to access sensitive information or functionality. The affected versions include all versions up to 1.6.6. The CVSS v3.1 base score is 7.5, indicating a high severity with network attack vector, no privileges required, no user interaction, and an impact limited to confidentiality. No patch or official fix has been documented in the provided data.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information due to missing authorization checks. The confidentiality of the affected system is compromised, but integrity and availability remain unaffected. There are no known active exploits in the wild as per current information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific temporary mitigations are documented in the provided data.