This vulnerability in WP Swings Membership For WooCommerce (<= 3.0.3) allows an attacker to bypass authorization controls by manipulating a user-controlled key due to misconfigured access control security levels. The flaw enables unauthorized access without any privileges or user interaction, potentially impacting availability. The CVSS score is 7.5 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability. No patch or vendor advisory details are provided, and the product is not a cloud service.

The vulnerability allows an attacker to bypass authorization mechanisms, potentially causing denial of service or disruption of availability within the affected plugin. Confidentiality and integrity impacts are not indicated. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates and consider limiting exposure of the affected plugin. No specific mitigations are provided in the available data.