CVE-2026-57419 describes a missing authorization vulnerability in the Stock Locations for WooCommerce plugin by Fahad Mahmood. The vulnerability arises from incorrectly configured access control, allowing users with limited privileges to perform unauthorized actions that impact data integrity. The affected versions include all versions up to and including 3.1.8. The CVSS 3.1 base score is 6.5, indicating a medium severity issue with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No official remediation or patch information is currently available.

Exploitation of this vulnerability could allow an attacker with some level of privileges to perform unauthorized modifications to stock location data within the WooCommerce plugin. This impacts data integrity but does not affect confidentiality or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations for the Stock Locations for WooCommerce plugin to limit user privileges and reduce risk.