This vulnerability involves improper control of code generation in the acowebs Dynamic Pricing With Discount Rules for WooCommerce plugin (versions ≤ 4.5.9), leading to a code injection flaw. An attacker with high privileges could exploit this to execute arbitrary code, impacting the system's confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and scope change with high impact on all three security properties.

Successful exploitation could allow an attacker with high privileges to execute arbitrary code within the affected WooCommerce environment, potentially leading to full system compromise, data theft, or service disruption. The critical CVSS score reflects the severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege access to the affected plugin and monitor for unusual activity related to dynamic pricing rules. Avoid using affected versions of the plugin if possible.