The vulnerability identified as CVE-2025-39602 affects WooCommerce Product Table Lite through version 3.9.5. It involves missing authorization checks, which means that users with limited privileges might perform actions that should be restricted. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges but no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. There is no vendor advisory or patch information available at this time.

The vulnerability allows an attacker with low privileges to perform unauthorized actions due to missing access control enforcement. This could lead to limited integrity violations within the affected WooCommerce Product Table Lite plugin. There is no indication of confidentiality or availability impact. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to minimize exposure. Monitor for updates from the vendor or security advisories for a patch or mitigation instructions.