CVE-2024-4233 is a missing authorization vulnerability (CWE-862) found in Tyche Softwares plugins for WordPress: Print Invoice & Delivery Notes for WooCommerce (up to version 4.8.1), Arconix Shortcodes (up to 2.1.10), and Arconix FAQ (up to 1.9.3). The flaw allows users with some level of privileges to bypass proper authorization controls, potentially enabling unauthorized actions that affect data integrity but not confidentiality or availability. The vulnerability is network exploitable with low attack complexity and requires some privileges but no user interaction. No vendor advisory or patch information is currently available.

The vulnerability allows unauthorized actions due to missing authorization checks, impacting data integrity. There is no impact on confidentiality or availability. The CVSS score of 4.3 indicates a medium severity level. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to the minimum necessary and monitor for unusual activity related to these plugins. Avoid granting elevated privileges to untrusted users. Follow updates from Tyche Softwares for any forthcoming patches or official mitigations.