This vulnerability in Razorpay for WooCommerce involves missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The issue affects all versions up to and including 4.8.2. The CVSS vector indicates the vulnerability is remotely exploitable over the network without privileges or user interaction, and it impacts the integrity of the system but not confidentiality or availability. No vendor advisory or patch information is currently provided, leaving the patch status unconfirmed.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions within the affected WooCommerce plugin, potentially modifying data or configurations without proper authorization. The impact is limited to integrity and does not affect confidentiality or availability. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. Applying strict access controls and limiting exposure of the affected plugin may reduce risk but are not guaranteed mitigations.