Missing authorization in the WooCommerce Recover Abandoned Cart plugin allows an attacker to delete arbitrary content, compromising data integrity. The flaw arises from incorrectly configured access control levels, enabling unauthorized users to issue deletion requests. This could lead to loss of customer information and store content.

The vulnerability affects the FantasticPlugins WooCommerce Recover Abandoned Cart plugin for all releases up to and including version 24.6.0. Users who have installed any affected version on their WordPress sites are susceptible.

The CVSS score of 7.5 indicates a high severity, while the EPSS score below 1% suggests a low probability of exploitation in the wild. The flaw is not listed in the CISA KEV catalog. Based on the nature of the vulnerability, the likely attack vector is remote exploitation through a web request, although the description does not specify precise prerequisites.