CyberRota Analysis
AI-GeneratedThe teddy-bear-customize-addon plugin for WordPress versions up to 1.0.5 is vulnerable due to a lack of authorization checks, enabling unauthenticated attackers to access and disclose sensitive WooCommerce order metadata and URLs of customer-uploaded attachments. This exposure could lead to privacy breaches and data leakage for affected users. WordPress site administrators using this plugin should prioritize updating to mitigate potential data exposure risks.
Original NVD Description
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data.