CVE-2023-32299 – Ni WooCommerce Sales Report <= 3.7.3 - Missing Authorization via ajax_sales_order

https://notcve.org/view.php?id=CVE-2023-32299

The Ni WooCommerce Sales Report plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_sales_order' function in versions up to, and including, 3.7.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to view sales and order reports. • CWE-862: Missing Authorization •