This vulnerability in Printcart Web to Print Product Designer for WooCommerce (up to version 2.4.8) is due to missing authorization checks, which leads to incorrect access control enforcement. An attacker with low privileges can exploit this to perform unauthorized actions that impact data integrity. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and limited impact on integrity only. No patch or vendor advisory is currently available, and the product is not a cloud service.

The vulnerability allows an attacker with low privileges to bypass authorization controls, potentially modifying data or performing unauthorized actions within the affected plugin. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin features to trusted users only and monitor for suspicious activity related to authorization bypass attempts.