This vulnerability (CWE-1284) in WP Swings Upsell Order Bump Offer for WooCommerce (<=3.1.4) is due to improper validation of specified quantity in input, resulting in unauthenticated broken authentication. The CVSS 3.1 score is 7.5, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and an impact on integrity but not confidentiality or availability. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

An attacker can exploit this vulnerability remotely without authentication or user interaction to compromise the integrity of the affected system. This could allow unauthorized manipulation of order bump offers, potentially leading to fraudulent transactions or bypassing intended business logic controls. There is no impact on confidentiality or availability reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected plugin or disabling it if feasible to reduce exposure.