This vulnerability in vanquish WooCommerce Bulk Product Editor (<= 3.0) arises from missing authorization checks, enabling users with limited privileges to perform actions beyond their intended access level. The issue stems from incorrectly configured access control security levels, which can be exploited remotely without user interaction. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) indicates network attack vector, low attack complexity, requires low privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact.

Attackers with low privileges can exploit this vulnerability to modify product data unauthorizedly, potentially disrupting e-commerce operations by altering product listings or availability. There is no confidentiality impact reported. The availability impact is high, suggesting possible denial or disruption of service related to product management functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the WooCommerce Bulk Product Editor plugin to trusted users only and monitor for unusual activity related to product editing. Avoid granting unnecessary privileges to users who do not require product editing capabilities.