Access Control Flaw in Wetail WooCommerce Fortnox Integration Affects Multiple Versions
CVE-2025-49998

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
WooCommerce Fortnox Integration
Vendor
CVE Published:
20 June 2025

What is CVE-2025-49998?

A Missing Authorization vulnerability in the Wetail WooCommerce Fortnox Integration plugin enables unauthorized access due to improperly configured security levels. This flaw could allow attackers to exploit sensitive functionalities, potentially compromising user data and integrity. It affects all versions preceding 4.5.5, emphasizing the need for immediate updates to secure WordPress sites utilizing this integration.

Affected Version(s)

WooCommerce Fortnox Integration <= 4.5.5

References

https://patchstack.com/database/wordpress/plugin/woocomme...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.