The garidium g-FFL Cockpit plugin for WordPress suffers from an improper authorization vulnerability (CWE-285) in the handle_enqueue_only() function. The plugin relies on IP-based authorization that can be spoofed, enabling unauthenticated attackers to delete arbitrary products. This affects all versions up to and including 1.7.1. The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts integrity only.

An attacker can bypass authorization controls by spoofing IP addresses, allowing deletion of arbitrary product data without authentication. This compromises data integrity but does not affect confidentiality or availability. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the plugin or restricting access to trusted IP ranges at the network level to mitigate unauthorized access. Monitor vendor channels for updates.