This vulnerability is classified as CWE-862 (Missing Authorization) and affects Revolut Gateway for WooCommerce versions before 4.22.10. It allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized access to certain features or data. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. There is no official remediation level or patch link provided in the available data, and no known exploits in the wild have been reported.

The impact is limited to unauthorized read access (confidentiality impact is low) without integrity or availability impact. Attackers can access restricted functionality or data without authentication, which may lead to information disclosure but not system compromise or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor vendor communications for updates. Until a patch is available, restrict access to the plugin and monitor for suspicious activity related to unauthorized access attempts.