The vulnerability identified as CVE-2024-56272 affects the 'Hide Category by User Role for WooCommerce' plugin by ThemeSupport. It is classified as a missing authorization issue, meaning that certain actions or functionalities within the plugin can be accessed or executed by users who should not have the necessary permissions. This affects all versions up to 2.1.1. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. There is no vendor advisory or patch link provided, and no known exploits have been observed.

The vulnerability allows unauthorized users with low privileges to perform actions that should be restricted, potentially leading to unauthorized modification of data or settings within the plugin. There is no confidentiality or availability impact indicated. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the plugin's features to trusted users only and monitor for unusual activity related to category visibility settings. Avoid granting unnecessary privileges to users who do not require them.