The vulnerability identified as CVE-2026-23977 affects the Helpdesk Support Ticket System for WooCommerce by WPFactory. It involves missing authorization controls, allowing attackers to bypass access restrictions due to incorrectly configured access control security levels. This issue impacts all versions up to and including 2.1.2. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without any privileges or user interaction, resulting in high confidentiality impact but no integrity or availability impact.

Exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information managed by the Helpdesk Support Ticket System for WooCommerce. Since the vulnerability allows access without proper authorization, attackers may read confidential data. There is no indication of impact on data integrity or system availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor WPFactory communications for updates. Until a fix is available, restricting access to the affected plugin and limiting exposure may reduce risk.