This vulnerability involves missing authorization checks in the 'Calculate Prices based on Distance For WooCommerce' plugin, which could allow an attacker with low privileges to perform actions that should require higher authorization. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but low integrity and low availability impacts. The affected versions are up to 1.3.5. There is no vendor advisory or patch information available at this time.

Exploitation of this vulnerability could allow an attacker with low privileges to perform unauthorized actions affecting the integrity and availability of the plugin's functionality. Confidentiality is not impacted. There are no known exploits in the wild. The impact is limited to the plugin and potentially the WooCommerce environment where it is installed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and restrict user privileges to minimize exposure. Monitor official sources for updates or patches from the plugin author or repository.