Constant Contact + WooCommerce Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the Constant Contact + WooCommerce plugin, specifically in versions through 2.4.1. This vulnerability allows for the exploitation of improperly configured access control, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could result in unauthorized access or actions being performed within the WooCommerce environment, potentially affecting order management, customer data, or other critical eCommerce functions.