This vulnerability (CWE-862) in Bosa Elementor Addons and Templates for WooCommerce involves missing authorization checks, allowing users with limited privileges to perform unauthorized actions. It affects versions up to 1.0.12. The CVSS 3.1 base score is 4.3 (medium severity) with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No vendor patch or official remediation level has been published as of the data provided.

The impact is limited to integrity as unauthorized actions could be performed by users with some privileges. There is no confidentiality or availability impact reported. The vulnerability could allow privilege escalation or unauthorized modification within the affected plugin's functionality but does not lead to full system compromise based on current data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor vendor communications for updates. Until a patch is released, restrict plugin usage to trusted users with appropriate privileges to reduce risk.