The vulnerability identified as CVE-2026-39662 affects the Product Price by Formula for WooCommerce plugin by ProWCPlugins. It is caused by missing authorization checks, which means that access control mechanisms are incorrectly configured or absent, allowing unauthorized users to manipulate product price formulas. The issue impacts all versions up to 2.5.6. The CVSS 3.1 base score is 5.3, indicating a medium severity vulnerability with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. No patch or official remediation level has been disclosed by the vendor or in the advisory data.

The vulnerability allows unauthorized users to alter product pricing formulas, which could lead to incorrect pricing information being displayed or applied in the WooCommerce store. This impacts the integrity of pricing data but does not affect confidentiality or availability. There are no known active exploits in the wild, and the issue does not require user interaction or privileges to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin's functionality and monitor for unusual pricing changes. Avoid exposing administrative or pricing configuration interfaces to untrusted users. Follow vendor updates closely for any forthcoming patches or official mitigation instructions.