This vulnerability in OPMC WooCommerce Dropshipping (<= 5.2.4) allows unauthenticated attackers to bypass authentication controls, classified as CWE-288. The weakness arises from broken authentication mechanisms that can be circumvented via an alternate path or channel. The CVSS 3.1 score of 6.5 indicates a medium severity with network attack vector and low complexity, enabling attackers to gain limited unauthorized access without requiring privileges or user interaction. No official patch or remediation level has been provided as of the published date.

Successful exploitation could allow an attacker to bypass authentication and gain unauthorized access to some functionality or data within WooCommerce Dropshipping, impacting confidentiality and integrity to a limited extent. There is no indication of availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected plugin or disabling it if feasible to reduce exposure.