This vulnerability in the Nota Fiscal Eletrônica WooCommerce plugin arises from missing authorization checks, enabling exploitation of improperly configured access control. A user with low privileges (PR:L) can perform actions that should require higher authorization, potentially modifying data (integrity impact). The vulnerability affects versions up to and including 3.4.0.9. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, no user interaction, and limited integrity impact. No patch or vendor advisory information is provided, and the product is not a cloud service.

An attacker with limited privileges can exploit this vulnerability to perform unauthorized actions that affect data integrity within the affected plugin. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to minimize risk from low-privilege accounts. Monitor for updates from the vendor or security advisories for a patch or mitigation instructions.