The Product Table for WooCommerce plugin by CodeAstrology suffers from a missing authorization vulnerability (CWE-862) that leads to sensitive information exposure. Specifically, unauthenticated attackers can leverage the var_dump_table parameter to access internal data structures without proper permission checks. This issue affects all versions up to 3.5.1. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, no user interaction, and impact limited to confidentiality loss only. No patch or vendor advisory is currently available, and no known exploits have been reported.

An unauthenticated attacker can access sensitive information from the affected plugin due to missing authorization checks. The exposure is limited to confidentiality and does not affect data integrity or system availability. This could potentially aid attackers in further reconnaissance or targeted attacks but does not directly allow system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected plugin functionality or disabling it if feasible. Monitor for vendor updates and apply patches promptly once available.