This vulnerability in Ni WooCommerce Cost Of Goods (<= 3.2.8) arises from missing authorization checks, which means that users with certain privileges might perform actions beyond their intended permissions due to incorrectly configured access control. The CVSS score is 5.4 (medium), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, but limited integrity and availability impacts. No vendor advisory or patch links are provided, and the product is not a cloud service.

The vulnerability allows unauthorized actions due to missing authorization, potentially affecting the integrity and availability of the affected system. Confidentiality is not impacted. Since no known exploits are reported, the immediate risk may be limited but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and restrict user privileges to minimize exposure to this vulnerability. Monitor official sources for updates or patches from the vendor.