This vulnerability (CVE-2026-73399) in Flutterwave WooCommerce (<= 3.3.0) involves broken authentication where an attacker can bypass authentication controls by exploiting an alternate path or channel. The issue is categorized under CWE-288 (Authentication Bypass Using an Alternate Path or Channel). The CVSS 3.1 base score is 6.5, indicating medium severity, with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. No patch or official remediation has been published by the vendor as of the data provided.

An attacker can bypass authentication without credentials, potentially leading to unauthorized actions that impact the integrity and availability of the affected system. There is no confidentiality impact reported. The vulnerability could allow limited unauthorized modifications or disruptions within the Flutterwave WooCommerce plugin environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations or workarounds have been documented by the vendor at this time.