This vulnerability involves missing authorization checks in the Smart Shopify Product by Yulio Aleman Jimenez, specifically in versions up to 1.0.2. The flaw arises from incorrectly configured access control, potentially allowing unauthorized users with low privileges to cause a denial of service (as indicated by the CVSS vector showing no confidentiality or integrity impact but high availability impact). The vulnerability is network exploitable and requires low attack complexity with no user interaction.

The impact is limited to availability, meaning an attacker with low privileges could disrupt the service or functionality of the Smart Shopify Product. There is no direct confidentiality or integrity impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently referenced, users should monitor vendor communications for updates. In the meantime, review and tighten access control configurations where possible to mitigate unauthorized access risks.