The vulnerability CVE-2026-57390 in EDGARROJAS Extra Product Options Builder for WooCommerce arises from missing authorization controls. This allows attackers to bypass access control restrictions, potentially modifying data or disrupting service availability. The affected versions include all versions up to and including 1.2.167. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with no confidentiality impact but with integrity and availability impacts. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor patch release.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized actions that compromise data integrity or availability within the affected WooCommerce plugin. There is no impact on confidentiality. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No temporary or official fixes are currently documented.