This vulnerability (CVE-2026-56025) affects Paymob for WooCommerce versions up to 4.1.2 and is classified as CWE-862: Missing Authorization. It allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized modification of data or actions within the affected plugin. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthenticated attackers to bypass authorization controls, leading to a high impact on data integrity within the Paymob for WooCommerce plugin. Confidentiality and availability are not impacted according to the CVSS vector. This could enable unauthorized modification of data or actions that should be restricted, potentially affecting transaction integrity or plugin behavior.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin or disabling it if possible to reduce exposure. Monitor vendor channels for updates and apply patches promptly once available.