WebToffee Order Export and Import for WooCommerce Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the WebToffee Order Export & Order Import for WooCommerce plugin, specifically in versions through 2.6.7. This vulnerability allows exploitation of improperly configured access control, potentially leading to unauthorized actions or data manipulation.

Impact

Exploitation of this vulnerability could result in unauthorized access or actions being performed on behalf of a user, potentially allowing for the manipulation of order data or other sensitive information.