Ni WooCommerce Customer Product Report Missing Authorization Vulnerability in WordPress

A vulnerability exists in the Ni WooCommerce Customer Product Report plugin for WordPress, all versions through 1.2.4. The issue arises from a lack of proper capability checks in the ni_woocpr_action() function, allowing authenticated attackers with Subscriber-level access and above to unauthorizedly modify plugin settings.

Impact

Exploitation of this vulnerability allows for unauthorized changes to plugin settings by authenticated users with Subscriber-level access or higher.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.