This vulnerability (CWE-862) in the Product Delivery Date for WooCommerce – Lite plugin allows unauthorized access to certain functions due to missing or insufficient authorization checks. Affected versions include all versions up to 2.7.2. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, impacting availability but not confidentiality or integrity. No vendor advisory or patch is currently available, and no known exploits have been reported in the wild.

The vulnerability allows an unauthenticated attacker to access functionality that should be restricted, potentially leading to denial of service or disruption of availability. There is no impact on confidentiality or integrity according to the CVSS vector. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor official channels from Tyche Softwares for updates. No specific mitigations are provided by the vendor at this time.