This vulnerability in Advanced WC Analytics (up to version 3.19.0) arises from missing authorization checks, enabling attackers to exploit improperly configured access control mechanisms. The issue is classified under missing authorization, which can lead to unauthorized information disclosure or limited denial of service. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with low impact on confidentiality and availability.

An attacker can remotely exploit the missing authorization to gain unauthorized access to certain functionalities or data within the Advanced WC Analytics plugin. The impact is limited to low confidentiality loss and low availability impact, with no integrity impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor vendor communications for updates. Until a fix is released, consider restricting access to the plugin's functionalities through other means such as web application firewalls or limiting user roles, if feasible.