This vulnerability involves missing authorization checks in the Advanced Coupons for WooCommerce Coupons plugin (versions up to 4.7.1). It allows an attacker with low privileges to exploit incorrectly configured access control, potentially leading to unauthorized actions related to coupon management. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and limited confidentiality impact. No integrity or availability impact is noted.

The vulnerability could allow an attacker with limited privileges to perform unauthorized actions within the plugin's coupon management functionality, potentially exposing some confidential information. There is no indication of impact on data integrity or system availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the plugin's administrative functions to trusted users only.