This vulnerability (CWE-862) in the Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez plugin arises from missing authorization checks, enabling attackers to perform unauthorized actions. The CVSS 3.1 score is 7.5 (high), with network attack vector, low attack complexity, no privileges or user interaction required, and impacts integrity only. The affected versions are prior to 4.2.8, but no explicit affected version range is provided. No vendor advisory or patch information is available, and no known exploits are reported in the wild.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized actions that compromise the integrity of the affected WooCommerce plugin's operations. There is no impact on confidentiality or availability reported. The high CVSS score reflects the ease of exploitation and potential integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific temporary mitigations are provided.