This vulnerability in Addonify – Compare Products For WooCommerce arises from missing authorization checks, allowing unauthorized access to certain functionality due to incorrectly configured access control. It affects all versions up to 1.1.17. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) indicates that the vulnerability is remotely exploitable without privileges or user interaction, resulting in limited confidentiality impact and low impact on availability, with no integrity impact reported. No official patch or remediation information is currently available.

Exploitation of this vulnerability could allow an attacker to access or interact with parts of the plugin functionality without proper authorization, potentially leading to limited disclosure of information (confidentiality impact) and minor disruption (availability impact). There is no indication of integrity compromise. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Addonify and consider restricting access to the affected plugin functionality where possible.