The Google for WooCommerce plugin for WordPress contains a missing authorization vulnerability (CWE-862) due to the presence of a publicly accessible print_php_information.php file. This file exposes sensitive server and PHP configuration details to unauthenticated users. The vulnerability affects all versions up to 2.8.6 and has a CVSS 3.1 base score of 5.3 (medium severity), reflecting its network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality impact. No patch or remediation details are currently available from the vendor.

An unauthenticated attacker can access the print_php_information.php file to disclose information about the webserver and PHP environment. While this does not directly allow code execution or data modification, the disclosed information can facilitate further targeted attacks against the affected system. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the print_php_information.php file by implementing web server access controls or removing the file if possible. Monitor vendor communications for updates on patches or official mitigations.