This vulnerability in WC Lovers WCFM Marketplace (up to version 3.7.1) is due to missing authorization checks, allowing actions that should require higher privileges to be performed without proper access control. The issue affects access control security configurations, potentially enabling denial of service conditions. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.

The primary impact is a potential denial of service due to missing authorization controls. There is no reported confidentiality or integrity impact. The vulnerability requires an attacker with high privileges to exploit and does not require user interaction. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor WC Lovers' official channels for updates. Until a fix is available, restrict access to high-privilege accounts and review access control configurations to minimize risk.