This vulnerability in the WPFactory Helpdesk Support Ticket System for WooCommerce arises from missing authorization checks, enabling exploitation of improperly configured access control. Affected versions include all releases up to and including 2.1.1. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges and no user interaction, resulting in integrity impact only. No known exploits are reported in the wild, and no official patch or remediation guidance has been provided by the vendor.

The vulnerability allows an attacker with low privileges to perform unauthorized actions that could modify data within the Helpdesk Support Ticket System for WooCommerce. There is no impact on confidentiality or availability according to the CVSS vector. Exploitation could lead to integrity violations but does not compromise data confidentiality or system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations where possible to limit privilege escalation risks. Monitor for vendor updates or security advisories regarding this vulnerability.