This vulnerability in Booster for WooCommerce (plugin by Pluggabl) involves missing authorization, which means certain actions or resources may be accessible without proper permission checks. The flaw affects versions before 7.11.3 and could be exploited remotely without privileges or user interaction. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and impact limited to availability loss.

The vulnerability can lead to availability impact, such as denial of service or disruption of the affected WooCommerce plugin functionality. There is no confidentiality or integrity impact reported. No known exploits in the wild have been documented, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or advisory is provided, monitor for updates from Pluggabl and apply any released fixes promptly. Until then, consider limiting exposure of the affected plugin or implementing compensating controls if feasible.