The vulnerability identified as CVE-2025-50008 affects the cscode WooCommerce Manager plugin (versions <= 1.2.4.5). It is caused by missing authorization checks, resulting in incorrectly configured access control security levels. This flaw allows users with limited privileges (PR:L) to perform actions without proper authorization, potentially impacting the integrity and availability of the affected WooCommerce features such as the cart page, add to cart button, and checkout fields. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

The vulnerability can allow an attacker with some privileges to perform unauthorized actions related to the WooCommerce cart and checkout customization features, potentially altering the behavior or data integrity of these components. There is no confidentiality impact reported. Availability and integrity impacts are rated low. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to minimize exposure. Monitor for vendor updates or patches addressing this missing authorization issue.