This vulnerability in ShipTime: Discounted Shipping Rates arises from missing authorization checks, which means that certain actions related to discounted shipping rates can be performed without proper access control. The affected versions include all versions up to and including 1.1.1. The issue is classified as a missing authorization vulnerability, indicating a failure to enforce security policies that restrict access to sensitive functions or data within the plugin.

The impact of this vulnerability is unauthorized access or manipulation of discounted shipping rate functionality within the ShipTime plugin. This could lead to abuse of shipping discounts or other unauthorized modifications. However, no specific exploitation details or known active attacks have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to the plugin's administrative functions and limiting user permissions may reduce risk.