CVE-2025-68013

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-04-27

Assigner: Patchstack

Description

Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Authorize.Net CIM for WooCommerce: from n/a through <= 2.1.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-22

Last Modified

2026-04-27

Generated

2026-07-06

AI Q&A

2026-01-22

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68013

Affected Vendors & Products

Vendor	Product	Version / Range
patchstack	authnet-cim-for-woo	to 2.1.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2025-68013 is a medium priority vulnerability in the WordPress Payment Gateway Authorize.Net CIM for WooCommerce Plugin (versions up to 2.1.2). It is a Missing Authorization vulnerability that allows attackers with at least subscriber or developer privileges to delete arbitrary website content such as pictures, posts, or pages due to improper access control (Broken Access Control). [1]

Impact Analysis

This vulnerability can lead to arbitrary deletion of website content, including important pictures, posts, or pages. This can disrupt website operations, cause data loss, damage reputation, and potentially lead to downtime or loss of user trust. [1]

Mitigation Strategies

Apply the mitigation rule provided by Patchstack immediately to block attacks exploiting this vulnerability until an official patch is released. Ensure that your WordPress site is protected by Patchstack's automated vulnerability mitigation and ongoing security intelligence. Avoid granting subscriber or developer privileges unnecessarily, as the vulnerability requires at least these privileges to be exploited. [1]

Compliance Impact

The provided resources do not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Detection Guidance

There are no specific detection commands provided for this vulnerability. However, users are advised to check if their WordPress site is running the Payment Gateway Authorize.Net CIM for WooCommerce plugin version 2.1.2 or earlier, as these versions are affected. Applying Patchstack's mitigation rule is recommended to block exploitation attempts until an official patch is released. [1]

Hi! I’m here to help you understand CVE-2025-68013. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70