CVE-2025-68013
BaseFortify
Publication date: 2026-01-22
Last updated on: 2026-04-27
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| patchstack | authnet-cim-for-woo | to 2.1.2 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-68013 is a medium priority vulnerability in the WordPress Payment Gateway Authorize.Net CIM for WooCommerce Plugin (versions up to 2.1.2). It is a Missing Authorization vulnerability that allows attackers with at least subscriber or developer privileges to delete arbitrary website content such as pictures, posts, or pages due to improper access control (Broken Access Control). [1]
How can this vulnerability impact me? :
This vulnerability can lead to arbitrary deletion of website content, including important pictures, posts, or pages. This can disrupt website operations, cause data loss, damage reputation, and potentially lead to downtime or loss of user trust. [1]
What immediate steps should I take to mitigate this vulnerability?
Apply the mitigation rule provided by Patchstack immediately to block attacks exploiting this vulnerability until an official patch is released. Ensure that your WordPress site is protected by Patchstack's automated vulnerability mitigation and ongoing security intelligence. Avoid granting subscriber or developer privileges unnecessarily, as the vulnerability requires at least these privileges to be exploited. [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided resources do not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
There are no specific detection commands provided for this vulnerability. However, users are advised to check if their WordPress site is running the Payment Gateway Authorize.Net CIM for WooCommerce plugin version 2.1.2 or earlier, as these versions are affected. Applying Patchstack's mitigation rule is recommended to block exploitation attempts until an official patch is released. [1]