This vulnerability in the File Uploads Addon for WooCommerce by Imaginate Solutions arises from missing authorization checks, enabling unauthorized users to exploit access control weaknesses. The affected versions include all releases up to and including 1.7.3. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no required privileges or user interaction. The impact is limited to partial confidentiality loss without affecting integrity or availability. No vendor patch or advisory is currently available, and no exploits are known in the wild.

An attacker can access functionality or data that should be restricted due to missing authorization controls, leading to limited confidentiality impact. There is no impact on data integrity or system availability. The vulnerability could allow unauthorized viewing or retrieval of files or data managed by the addon.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and restrict access permissions to the File Uploads Addon for WooCommerce and monitor for unusual activity related to file uploads. Avoid exposing the addon to untrusted networks if possible.