This vulnerability in Stock Locations for WooCommerce arises from missing authorization checks, allowing users with limited privileges to perform unauthorized actions. It affects all versions up to and including 2.8.6. The CVSS vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No patch or official fix has been documented yet.

Exploitation of this vulnerability could allow an attacker with some level of privileges to perform unauthorized actions that may disrupt the availability of the affected WooCommerce plugin functionality. There is no direct confidentiality impact, but integrity and availability impacts are present. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected plugin features to trusted users only and monitor for unusual activity related to stock location management. Avoid granting unnecessary privileges to users interacting with this plugin.