This vulnerability in FantasticPlugins WooCommerce Recover Abandoned Cart arises from missing authorization checks, allowing attackers to bypass access controls. It affects all versions up to 24.6.0. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. This suggests that an attacker can perform unauthorized modifications without needing prior access or user interaction.

The impact is primarily on integrity, meaning unauthorized users could potentially alter data or configurations within the affected plugin. There is no confidentiality or availability impact reported. This could lead to unauthorized changes in the abandoned cart recovery process or related data manipulation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor FantasticPlugins communications for updates. Until a fix is available, consider restricting access to the plugin's administrative interfaces and reviewing user permissions to minimize exposure.