This vulnerability in WR Price List Manager For Woocommerce arises from incorrectly configured access control security levels, resulting in missing authorization checks. It affects versions up to 1.0.8 and allows users with limited privileges to potentially perform unauthorized actions, impacting the integrity and availability of the system. The CVSS score is 5.4 (medium severity) with network attack vector, low attack complexity, requiring privileges, no user interaction, and unchanged scope. No patch or vendor advisory is currently available.

The vulnerability allows unauthorized modification or disruption of functionality within the affected plugin, impacting integrity and availability. Confidentiality is not affected. Since no known exploits are reported, the immediate risk appears limited but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to users with privileges and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges to users interacting with the WR Price List Manager For Woocommerce plugin.