CVE-2025-13389 | Admin and Customer Messages after Order for WooCommerce Plugin get_order_by_id authorization

A vulnerability was found in Admin and Customer Messages after Order for WooCommerce Plugin on WordPress. It has been declared as problematic. This issue affects the function get_order_by_id. Such manipulation leads to missing authorization.

This vulnerability is listed as CVE-2025-13389. The attack may be performed from remote. There is no available exploit.