WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update vulnerability

Incorrect Authorization to Authenticated Contributor+ Refund Status Update vulnerability discovered by Powpy in WordPress Plugin Flexible Refund and Return Order for WooCommerce versions = 1.0.42...

CVE-2025-12621

creationtimestamp| type| source ---|---|--- 2025-11-08 09:08:30+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m54akyaxsi72 2025-11-08 09:43:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m54cklblzj2n...