This vulnerability in knitpay Razorpay Payment Links for WooCommerce (versions <= 2.1.4) involves missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. This incorrect access control can be exploited remotely without authentication (AV:N/PR:N/UI:N), potentially causing integrity and availability impacts (I:L/A:L). The vulnerability is publicly disclosed but lacks an official fix or vendor advisory at this time.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized actions that may alter data or disrupt service availability within the affected WooCommerce payment plugin. There is no confidentiality impact reported. The medium CVSS score reflects the potential for integrity and availability damage without requiring user interaction or privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. Applying strict access control policies and limiting exposure of the affected plugin may reduce risk, but no vendor-provided mitigation is currently documented.