This vulnerability in Product Slider for WooCommerce (<= 1.13.62) allows an attacker with limited privileges to bypass authorization controls by manipulating user-controlled keys, leading to insecure direct object references (IDOR). This can result in unauthorized read access to data that should be restricted. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, required privileges, no user interaction, and limited confidentiality impact. No known exploits are reported in the wild, and no vendor advisory or patch information is currently provided.

An attacker with some level of privileges can exploit this vulnerability to access data they are not authorized to view. The impact is limited to confidentiality as integrity and availability are not affected. The vulnerability could expose sensitive information within the plugin's scope but does not allow code execution or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to the minimum necessary and monitor for any unusual access patterns related to the Product Slider for WooCommerce plugin.