WordPress Ni WooCommerce Sales Report plugin <= 3.7.3 - Broken Access Control vulnerability

CVE-2023-32299

What is CVE-2023-32299?

A missing authorization vulnerability in Anzia's Ni WooCommerce Sales Report has been identified, allowing attackers to exploit incorrectly configured access control security levels. The flaw is present in versions from n/a to 3.7.3 of the plugin, leading to potential unauthorized access to sensitive sales data. Site owners are encouraged to ensure proper access controls are established to mitigate the risk posed by this vulnerability.

References