This vulnerability in WPC Product Bundles for WooCommerce arises from missing authorization checks, enabling attackers with low privileges to exploit incorrectly configured access control. The flaw affects all versions up to 8.4.5. The CVSS vector indicates the attack can be performed remotely over the network, with low attack complexity and no user interaction required. The impact is limited to partial confidentiality loss, with no integrity or availability impact reported. No official patch or vendor advisory is currently available, and no known exploits have been reported.

The vulnerability allows an attacker with low privileges to bypass authorization controls, potentially leading to unauthorized access to some confidential information within the plugin's scope. There is no reported impact on data integrity or system availability. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations related to the WPC Product Bundles for WooCommerce plugin. Monitor vendor channels for updates and apply patches promptly once available.