This vulnerability involves missing authorization controls in the Palscode Multi Currency For WooCommerce plugin, versions up to 1.5.5. The flaw allows users with low privileges to potentially perform actions without proper authorization, classified under CWE-862. The CVSS 3.1 base score is 4.3, indicating a medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacting availability only. No patch or official remediation level has been published by the vendor or Patchstack as of the publication date.

The vulnerability could allow an attacker with limited privileges to cause availability disruptions in the affected plugin. There is no impact on confidentiality or integrity. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit user privileges to trusted users only and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges that could be exploited due to this missing authorization vulnerability.