CVE-2025-13452 | Admin and Customer Messages after Order for WooCommerce Plugin REST Endpoint authorization

A vulnerability categorized as critical has been discovered in Admin and Customer Messages after Order for WooCommerce Plugin up to 14 on WordPress. The affected element is an unknown function of the component REST Endpoint. Executing manipulation of the argument user_id/order_id/context can lead to missing authorization.

This vulnerability is registered as CVE-2025-13452. It is possible to launch the attack remotely. No exploit is available.