This vulnerability in the ThemeLocation Custom WooCommerce Checkout Fields Editor plugin arises from missing authorization controls, allowing users with limited privileges to perform actions they should not be authorized to execute. The affected versions include all versions up to 1.3.0. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and requiring low privileges, no user interaction, and resulting in integrity impact only. No official remediation or patch has been published yet, and the plugin is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows unauthorized modification or manipulation of checkout fields due to missing authorization checks. This can lead to integrity issues within the WooCommerce checkout process but does not affect confidentiality or availability. There are no known active exploits targeting this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to users with administrative privileges and monitor for unusual activity related to checkout field modifications. Avoid granting unnecessary permissions to users who can access the plugin's functionality.