The vulnerability identified as CVE-2026-81790 is a missing authorization flaw in the Viszt Péter Csomagpontok és szállítási címkék WooCommerce plugin. It allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions. The issue affects versions prior to 4.2.8, though no specific affected versions are explicitly confirmed. The CVSS v3.1 score of 7.5 indicates a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

The vulnerability allows unauthorized users to perform actions that should be restricted, impacting the integrity of the affected system. There is no impact on confidentiality or availability according to the CVSS vector. This could lead to unauthorized modifications within the WooCommerce plugin environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates and consider restricting access to affected plugin functionalities until a fix is available.