This vulnerability involves missing authorization checks in the Themeisle PPOM for WooCommerce plugin (up to version 33.0.16), which allows users with limited privileges to perform actions that should require higher authorization. The CVSS score is 4.3 (medium), reflecting a network attack vector with low complexity and requiring low privileges, no user interaction, and resulting in integrity impact only. No known exploits are reported in the wild, and no vendor patch or advisory details are currently available.

The vulnerability allows an attacker with low privileges to bypass access controls and perform unauthorized actions that could modify data or plugin configurations, impacting data integrity. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to trusted users only and monitor for unusual activity related to the plugin. Avoid granting unnecessary permissions to users interacting with the PPOM for WooCommerce plugin.