PT-2026-21071 · WordPress · Bluex For Woocommerce

Published 2026-02-20 · Updated 2026-02-22 · CVE-2025-68022

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Plugin BlueX for WooCommerce versions through 3.1.6

Description An issue exists in Plugin BlueX for WooCommerce related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue involves a missing authorization check.

Recommendations Update Plugin BlueX for WooCommerce to a version newer than 3.1.6.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-68022

Affected Products

Bluex For Woocommerce

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-68022 · Security Note
• https://twitter.com/CVEnew/status/2025524046360690852 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/bluex-for-woocommerce/vulnerability/wordpress-plugin-bluex-for-woocommerce-plugin-3-1-4-broken-access-control-vulnerability?_s_id=cve · Note