CVE-2025-31757: 
WordPress vulnerability analysis and mitigation

Missing Authorization vulnerability identified in BinaryCarpenter Free Woocommerce Product Table View plugin through version 1.78. The vulnerability allows exploiting incorrectly configured access control security levels. The issue was discovered and disclosed on April 1, 2025 (NVD, Patchstack).

The vulnerability is classified as a broken access control issue with a CVSS v3.1 base score of 5.4 (Medium). The vulnerability stems from missing authorization, authentication, or nonce token checks in certain functions, potentially allowing unprivileged users to execute higher privileged actions. The issue is tracked as CWE-862 (Missing Authorization) (Patchstack).

The vulnerability could allow unauthorized users to perform actions that should be restricted to users with higher privileges. The software is considered abandoned, as it hasn't received updates for over a year, increasing the potential security risk for websites using this plugin (Patchstack).

No official fix is available for this vulnerability. The recommended mitigation is to remove and replace the software with an alternative solution, as the plugin is considered abandoned and unlikely to receive future updates or security fixes (Patchstack).