This vulnerability in the Dotstore Product Size Charts Plugin for WooCommerce is due to missing authorization checks. It affects versions up to and including 2.4.5. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. The lack of authorization could allow an attacker with some privileges to perform unauthorized modifications or actions within the plugin.

The impact is limited to integrity, meaning unauthorized changes could be made to the plugin's data or behavior. There is no impact on confidentiality or availability. The vulnerability requires an attacker to have some level of privileges on the system, reducing the risk compared to vulnerabilities exploitable by unauthenticated attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to trusted users only and monitor for suspicious activity related to the plugin. Avoid granting unnecessary privileges that could be leveraged to exploit this vulnerability.