This vulnerability in Bux Woocommerce arises from missing authorization checks, enabling unauthenticated users to access certain functions that should be restricted by ACLs. It affects all versions up to 1.2.3. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, causing integrity and availability impacts but no confidentiality loss. No patch or vendor advisory is currently available to confirm remediation status.

An attacker can exploit this vulnerability to perform unauthorized actions within the affected Bux Woocommerce plugin, potentially leading to integrity and availability issues. There is no evidence of confidentiality compromise. The vulnerability does not require user interaction or privileges, increasing its risk profile. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates and consider restricting access to the affected plugin functionality where possible.