This vulnerability in Eupago Gateway For Woocommerce arises from missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The affected versions include all versions up to 4.7.1. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or official remediation guidance has been provided, and no exploits are known in the wild.

The vulnerability allows unauthorized users to perform actions that should require authorization, potentially leading to integrity issues within the Eupago Gateway For Woocommerce plugin. There is no impact on confidentiality or availability. Since no known exploits exist in the wild, the immediate risk is moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor for updates from Eupago and consider restricting access to the plugin's administrative interfaces to trusted users only. Avoid exposing the plugin to untrusted networks or users where possible.