This vulnerability in MultiVendorX WC Marketplace arises from missing authorization checks, allowing users with low privileges to perform actions they should not be authorized to execute. The issue affects all versions up to 4.1.3. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and no user interaction, requiring low privileges. The impact is limited to integrity loss and high availability impact, with no confidentiality impact. No official fix or patch has been published yet, and no known exploits have been reported.

An attacker with low privileges can exploit this missing authorization flaw to perform unauthorized actions that may disrupt the availability of the WC Marketplace plugin, potentially causing denial of service conditions. There is no confidentiality impact, but integrity and availability impacts are present. This could affect the normal operation of e-commerce functionality relying on this plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to trusted users only and monitor for unusual activity related to WC Marketplace. Avoid granting unnecessary privileges to users in the affected versions. Follow vendor channels for updates on patches or official mitigations.