This vulnerability (CVE-2026-54847) in the Design Stylish Cost Calculator product is classified as CWE-862: Missing Authorization. It allows unauthenticated attackers to bypass access controls in versions up to 8.3.9, potentially exposing sensitive information. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. As of the published date, no vendor advisory or patch is available, and no known exploits have been reported in the wild.

Successful exploitation could lead to unauthorized disclosure of sensitive information due to broken access control without requiring authentication. There is no impact on data integrity or system availability. The vulnerability affects confidentiality with a high severity rating (CVSS 7.5).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application where possible and monitor for unusual access patterns. Avoid exposing the affected versions publicly if feasible.