This vulnerability in WPClever WPC Product Bundles for WooCommerce (up to version 8.4.5) arises from missing authorization checks, leading to incorrect access control configurations. An attacker with low privileges can exploit this issue remotely over the network without user interaction to gain limited unauthorized access to data. The CVSS 3.1 base score is 4.3, reflecting a low impact on confidentiality and no impact on integrity or availability. There is no vendor advisory or patch information available at this time.

The vulnerability allows an attacker with some privileges to bypass authorization controls, potentially exposing limited confidential information. There is no impact on data integrity or system availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the affected plugin. Monitor vendor channels for updates and apply patches promptly once available.