This vulnerability in the Standard Box Sizes plugin for WooCommerce arises from missing authorization controls, allowing unauthenticated remote attackers to perform unauthorized actions that impact data integrity. It affects all versions up to 1.6.13. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope. The vulnerability does not affect confidentiality or availability but can cause integrity violations. No patch or official remediation details are currently provided.

The vulnerability allows unauthorized modification or manipulation of data related to the Standard Box Sizes plugin, potentially leading to integrity issues within the WooCommerce environment. Confidentiality and availability are not impacted according to the CVSS vector. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin's functionalities and monitor for unusual activity related to Standard Box Sizes. Avoid exposing administrative interfaces to untrusted networks.