The Barcode Generator for WooCommerce plugin contains a missing authorization flaw that allows an attacker to delete arbitrary content from product pages and orders. This weakness is classified as CWE‑862, representing a breach of access control that results in data integrity compromise. When exploited, the attacker can remove or tamper with valuable product information, potentially erasing inventory listings or order records, which could damage business operations and trust.

The vulnerability affects the Barcode Generator for WooCommerce plugin developed by Dmitry V. (CEO of 'UKR Solution'). All versions from the initial release up through version 2.0.4 are vulnerable; there is no fixed version before 2.0.5.

The CVSS v3.1 score is 7.5, indicating a moderate‑to‑high severity. The EPSS estimate is below 1 %, suggesting that active exploitation is unlikely at present, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attacker would need authenticated access via the plugin’s administrative interface; by exploiting the incorrect access control, the attacker could trigger deletion operations without proper authorization.