This vulnerability in GS Variation Swatches for WooCommerce (<= 3.0.4) arises from missing authorization controls, allowing users with limited privileges to exploit incorrectly configured access control security levels. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and limited availability impact. The issue is specific to the plugin's authorization mechanisms and does not affect cloud services. No patch or vendor advisory is currently provided.

The vulnerability allows unauthorized actions by users with limited privileges, potentially leading to limited integrity and availability impacts within the affected WooCommerce plugin environment. There is no confidentiality impact reported. No known exploits in the wild have been identified.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations for the GS Variation Swatches plugin. Monitor vendor channels for updates and apply patches promptly once available.