A missing authorization vulnerability exists in VillaTheme CURCY woo-multi-currency plugin versions up to 2.2.21. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data or settings. The vulnerability has a medium severity rating with a CVSS score of 5.3.