This vulnerability involves missing authorization checks in the WPC Smart Wishlist plugin for WooCommerce, which could allow users with limited privileges to perform actions beyond their intended access rights. The issue affects all versions up to 5.0.8. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. No official patch or mitigation details are currently available.

The vulnerability could allow an attacker with low privileges to modify or interfere with wishlist data or related functionality, impacting the integrity of the affected system. There is no indication of confidentiality or availability being compromised. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations for the WPC Smart Wishlist plugin where possible. Monitor official WPClever communications for updates or patches addressing this vulnerability.