A missing authorization vulnerability exists in VillaTheme CURCY woo-multi-currency plugin versions up to 2.2.20. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data or settings.