The vulnerability identified as CVE-2024-50421 affects the WooCommerce PDF Invoices & Packing Slips plugin by WP Overnight. It is caused by missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. This issue affects all versions up to and including 3.8.6. The CVSS vector indicates it is remotely exploitable without privileges or user interaction, impacting integrity but not confidentiality or availability. No patch or vendor advisory has been referenced to confirm remediation status.

The impact of this vulnerability is limited to integrity, as unauthorized users may perform actions they should not be allowed to, potentially altering invoice or packing slip data. There is no impact on confidentiality or availability reported. Since no known exploits are in the wild, the immediate risk appears moderate but should be addressed to prevent misuse.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from WP Overnight and consider restricting access to the affected plugin functionality where possible to reduce exposure.