This vulnerability in Virtuaria PagBank / PagSeguro para Woocommerce arises from missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The affected versions include all up to and including 3.6.3. The CVSS score of 5.3 reflects a network attack vector with low complexity, no privileges required, no user interaction, and impacts integrity only. No vendor advisory or patch information is currently available.

The vulnerability allows an attacker to exploit incorrect access control configurations, potentially modifying data or performing unauthorized actions within the plugin context. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Virtuaria and consider restricting access to the affected plugin where possible.