This vulnerability in the Woo Product Feed For Marketing Channels plugin arises from missing authorization checks, leading to incorrect access control. It affects all versions up to 1.9.0. The CVSS 3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact on availability only. There is no evidence of known exploits in the wild, and no vendor patch or advisory is currently available.

The vulnerability can be exploited remotely without authentication or user interaction, potentially causing denial of service or disruption of availability for the affected plugin. There is no reported impact on confidentiality or integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting access to the affected plugin to prevent exploitation. Monitor vendor channels for updates and apply patches promptly once released.