Missing Authorization Vulnerability in Embed and Integrate Etsy Shop by WordPress

CVE-2025-48346

What is CVE-2025-48346?

A vulnerability has been identified in the Embed and Integrate Etsy Shop plugin, which allows unauthorized access to functionalities that are not properly restricted by Access Control Lists (ACLs). This oversight can lead to unauthorized users gaining access to sensitive features, potentially compromising the integrity of user data. Users of versions from n/a up to 1.0.4 are advised to take immediate action to safeguard their installations against this exploit.

References