This vulnerability involves missing authorization checks in the Taxonomy/Term and Role based Discounts for WooCommerce plugin, allowing unauthorized users to exploit incorrectly configured access control security levels. It affects all versions up to 5.1. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges but requires user interaction, and the impact is limited to availability with no confidentiality or integrity loss. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability could allow an attacker to cause availability issues in the affected WooCommerce plugin by bypassing access controls. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits in the wild have been reported, so the practical impact is currently limited but could affect service availability if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from the vendor and consider restricting access to the affected plugin's functionality where possible. No vendor advisory or patch links are currently available.