This vulnerability in Advanced Product Fields (Product Addons) for WooCommerce arises from missing authorization checks, enabling unauthorized access to certain plugin functions or data. It affects versions up to 1.6.18 and is classified with a CVSS score of 5.3 (medium severity), indicating a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported. No known exploits in the wild have been reported, and no patch or official remediation guidance is currently available.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions within the plugin, potentially modifying data or configurations without proper permissions. There is no impact on confidentiality or availability. The medium severity score reflects the limited but non-negligible risk to data integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access controls around the plugin's functionality where possible. Monitor for updates from Wombat Plugins regarding patches or security advisories.