The vulnerability CVE-2025-31757 in BinaryCarpenter's Free Woocommerce Product Table View plugin is due to missing authorization checks, which results in incorrect access control enforcement. This allows users with limited privileges to perform actions that should be restricted, impacting the integrity and availability of the affected system. The issue affects all versions up to and including 1.78. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires low privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized actions that may alter data or disrupt service availability within the affected plugin. There is no confidentiality impact reported. The overall impact is limited to integrity and availability with low severity consequences.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from BinaryCarpenter and apply any official patches once available. Until then, consider restricting access to users with minimal privileges and review plugin usage to limit exposure.