This vulnerability in WPCargo Track & Trace (<= 8.0.2) involves missing authorization checks due to misconfigured access control, enabling unauthorized users to access protected resources or functions. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates that the vulnerability can be exploited remotely over the network without authentication or user interaction, resulting in a high confidentiality impact but no integrity or availability impact. No vendor patch or advisory is provided, and the product is not a cloud service, so remediation depends on vendor updates.

Exploitation of this vulnerability could allow remote attackers to access sensitive information without authorization, compromising confidentiality. There is no impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, users should monitor for vendor updates and consider implementing compensating controls such as restricting network access to the affected application until a fix is released.