WordPress WooCommerce Manager Missing Authorization Vulnerability in Access Control

A broken access control vulnerability has been identified in the WordPress WooCommerce Manager plugin, specifically in versions through 1.2.4.5. This vulnerability arises from a missing authorization check, allowing unprivileged users to perform actions that require higher privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to restricted functions or data, potentially allowing them to manipulate WooCommerce settings or order information.

Remediation

Users are advised to remove and replace this plugin, as it is likely abandoned and will not receive further updates or fixes.