The Cecabank WooCommerce Plugin versions up to 0.3.4 suffer from a missing authorization vulnerability, which means the plugin does not properly enforce access control checks. This can allow an attacker with network access to perform unauthorized operations that affect the integrity of the plugin's functionality. The vulnerability has a CVSS 3.1 base score of 5.3, reflecting a medium severity level with network attack vector, low attack complexity, no privileges or user interaction required, and an impact limited to integrity.

The vulnerability impacts the integrity of the Cecabank WooCommerce Plugin by allowing unauthorized actions due to missing authorization controls. There is no impact on confidentiality or availability according to the CVSS vector. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restricting network access to the plugin and minimizing exposure may reduce risk.