A missing authorization vulnerability exists in VillaTheme CURCY woo-multi-currency plugin versions up to 2.2.20. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data or settings. The vulnerability does not impact confidentiality or availability but can affect integrity.