CyberRota Analysis
AI-GeneratedThe WPC Order Tip for WooCommerce plugin prior to version 3.3.1 is vulnerable due to a lack of authorization and nonce checks, enabling unauthenticated attackers to access sensitive customer order data, including billing names, order IDs, and statuses. This vulnerability poses a significant risk to e-commerce sites using this plugin, as it can lead to data breaches and compromise customer privacy. WordPress site administrators utilizing this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WPC Order Tip for WooCommerce WordPress plugin before 3.3.1 does not perform authorisation or nonce checks in one of its reporting features, allowing unauthenticated attackers to retrieve sensitive order data belonging to any customer of the store, such as billing names, order IDs and statuses, fee amounts and order dates.