This vulnerability in the WooCommerce Bulk Product Editor plugin arises from missing authorization checks, enabling users with limited privileges to bypass access controls. The affected versions include all up to and including 3.0. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. The issue allows unauthorized modification of product data, potentially disrupting e-commerce operations.

Exploitation can lead to unauthorized modification of product information within WooCommerce stores using the vulnerable plugin. This can disrupt availability of product data or integrity of listings but does not expose confidential information. The high CVSS score reflects the potential for significant operational impact due to improper access control.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict plugin usage to trusted users with appropriate privileges and monitor for unusual activity related to product editing. Avoid exposing the plugin interface to untrusted users.