The vulnerability is a missing authorization flaw that allows an attacker to delete arbitrary content within the WordPress site. This weakness maps to CWE-862 (Missing Authorization). It originates from incorrectly configured access control levels for the WR Price List Manager For Woocommerce plugin. Because an attacker can remove data, the primary impact is loss of content and potential disruption of site functionality.

The affected vendor is Web Ready Now and the product is the WR Price List Manager For Woocommerce plugin. Versions up to and including 1.0.8 are impacted, as indicated by the vulnerability range "from n/a through <= 1.0.8".

The CVSS score of 5.4 indicates medium severity, mainly threatening availability. The EPSS score of less than 1% suggests a low likelihood of exploitation in the near term. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that the attack vector is remote through the plugin’s administrative interface; however, the CVE does not explicitly state the authentication level required, so the exact privilege needed to exploit remains unspecified.