This vulnerability in WiserReview Product Reviews for WooCommerce involves missing authorization controls, which means that certain actions or resources may be accessible without proper permission checks. The issue affects all versions up to 2.9. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges but no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized users with low privileges to perform actions that could modify or manipulate product reviews, impacting the integrity of the data. There is no direct impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and restrict user privileges carefully to minimize exposure. Monitor vendor channels for updates and apply patches promptly once released.