This vulnerability, identified as CWE-862 (Missing Authorization), affects Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) versions up to 1.0.7. It allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized modification or manipulation of payment gateway functionality. The CVSS 3.1 score of 7.5 reflects a network attack vector with low attack complexity, no privileges or user interaction required, and an impact limited to integrity. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

The vulnerability allows unauthenticated attackers to bypass authorization controls, potentially enabling unauthorized actions that compromise the integrity of the payment gateway system. Confidentiality and availability impacts are not indicated. This could lead to manipulation of payment processing or related operations within the affected WooCommerce plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin functionality or disabling the plugin if feasible to reduce exposure.