This vulnerability in WC Pickup Store arises from missing authorization checks, leading to incorrect access control configurations. It affects all versions up to 1.8.9 and can be exploited remotely without privileges or user interaction. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

The vulnerability allows an attacker to perform actions that compromise the integrity and availability of the affected system, though it does not impact confidentiality. Exploitation could lead to unauthorized modifications or disruptions within the WC Pickup Store environment. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict access to the affected plugin where possible and review access control configurations to minimize exposure.