The vulnerability CVE-2026-24946 in the Print Invoice & Delivery Notes for WooCommerce plugin arises from missing authorization controls, allowing unauthorized users to exploit incorrectly configured access control mechanisms. This affects all versions up to 5.8.0. The CVSS 3.1 base score of 6.5 reflects a network attack vector with low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but with integrity and availability impacts. There is no vendor advisory or patch information currently available, and no known active exploitation has been reported.

This vulnerability could allow an attacker to perform unauthorized actions related to the plugin's functionality, potentially leading to integrity and availability impacts on the affected WooCommerce installation. Since confidentiality impact is not indicated, sensitive data disclosure is unlikely. The medium severity score reflects moderate risk, but the absence of known exploits reduces immediate threat urgency.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. Applying principle of least privilege to user roles and restricting access to the plugin's features may reduce risk, but no specific mitigations are documented.