This vulnerability in the Ultimate Gift Cards For WooCommerce plugin arises from missing authorization checks, which means certain actions or data may be accessible without proper permissions. The affected versions include all releases up to and including 3.2.4. The CVSS 3.1 base score is 5.3 (medium), with an attack vector of network, low attack complexity, no privileges required, no user interaction, and impacts integrity only. No known exploits are reported in the wild, and no official patch or vendor advisory has been provided yet.

The vulnerability allows unauthorized users to perform actions or access functionality that should be restricted, potentially leading to integrity issues within the plugin's operations. There is no impact on confidentiality or availability according to the CVSS vector. No evidence of active exploitation is currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from WP Swings and consider limiting exposure of the affected plugin to untrusted users or networks where possible.