This vulnerability involves a missing authorization control in the Creative Werk Designs plugin for WooCommerce that exports order, product, customer, and coupon data to Google Sheets. Affected versions are up to 1.8.2. The flaw allows users with some privileges (low privilege) to perform actions without proper authorization, potentially leading to limited integrity impact. The CVSS score is 4.3 (medium severity), indicating network attack vector, low attack complexity, low privileges required, no user interaction, and no confidentiality or availability impact.

The vulnerability allows unauthorized actions due to missing authorization checks, potentially leading to limited integrity issues within the affected plugin's functionality. There is no impact on confidentiality or availability. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict plugin usage to trusted users with appropriate privileges and monitor for updates from Creative Werk Designs regarding patches or mitigations.