The vulnerability identified as CVE-2026-24583 affects the SumUp Payment Gateway For WooCommerce plugin through missing authorization controls. This flaw allows unauthorized users to access functionality that should be restricted due to incorrectly configured access control security levels. The issue affects all versions up to 2.7.9. The CVSS 3.1 base score is 5.3, with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to availability loss. No patch or official remediation guidance is currently available.

The impact is limited to availability, meaning an attacker could potentially disrupt the availability of the affected plugin or related services. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review access control configurations and restrict access to the plugin's administrative functions where possible. Monitor for any updates from the vendor regarding patches or official mitigations.