A vulnerability was found in Vchasno Kasa Plugin up to 1.0.3 on WordPress. It has been declared as problematic. This vulnerability affects the function
mrkv_vchasno_kasa_wc_do_metabox_action
of the component Invoice Generation Handler. The manipulation leads to missing authorization.
This vulnerability was named CVE-2025-6721. The attack can be initiated remotely. There is no exploit available.