The vulnerability identified as CVE-2026-39668 affects the Book Previewer for Woocommerce plugin by g5theme. It is caused by missing authorization checks, which means that the plugin does not properly enforce access control on certain functions or resources. This can allow an attacker to bypass security restrictions and access features or data that should be protected. The issue affects all versions up to 1.0.6. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction and impacts confidentiality with low severity, but does not affect integrity or availability.

Exploitation of this vulnerability could lead to unauthorized access to certain features or data within the Book Previewer for Woocommerce plugin. The impact is limited to confidentiality loss with no direct impact on integrity or availability. There are no known exploits in the wild, and the medium CVSS score reflects a moderate risk level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from g5theme and apply any patches promptly once available. No specific temporary mitigations are provided in the available data.