CVE-2025-68013
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-04-27

Assigner: Patchstack

Description
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Authorize.Net CIM for WooCommerce: from n/a through <= 2.1.2.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-22
Last Modified
2026-04-27
Generated
2026-06-16
AI Q&A
2026-01-22
EPSS Evaluated
2026-06-15
NVD
CVE-2025-68013
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
patchstack authnet-cim-for-woo to 2.1.2 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The provided resources do not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Detection Guidance

There are no specific detection commands provided for this vulnerability. However, users are advised to check if their WordPress site is running the Payment Gateway Authorize.Net CIM for WooCommerce plugin version 2.1.2 or earlier, as these versions are affected. Applying Patchstack's mitigation rule is recommended to block exploitation attempts until an official patch is released. [1]

Executive Summary

CVE-2025-68013 is a medium priority vulnerability in the WordPress Payment Gateway Authorize.Net CIM for WooCommerce Plugin (versions up to 2.1.2). It is a Missing Authorization vulnerability that allows attackers with at least subscriber or developer privileges to delete arbitrary website content such as pictures, posts, or pages due to improper access control (Broken Access Control). [1]

Impact Analysis

This vulnerability can lead to arbitrary deletion of website content, including important pictures, posts, or pages. This can disrupt website operations, cause data loss, damage reputation, and potentially lead to downtime or loss of user trust. [1]

Mitigation Strategies

Apply the mitigation rule provided by Patchstack immediately to block attacks exploiting this vulnerability until an official patch is released. Ensure that your WordPress site is protected by Patchstack's automated vulnerability mitigation and ongoing security intelligence. Avoid granting subscriber or developer privileges unnecessarily, as the vulnerability requires at least these privileges to be exploited. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-68013. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart