CVE-2022-38141 – WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control

https://notcve.org/view.php?id=CVE-2022-38141

Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8. Vulnerabilidad de autorización faltante en Zorem Sales Report Email para WooCommerce. Este problema afecta a Report Email para WooCommerce: desde n/a hasta 2.8. The Sales Report Email for WooCommerce plugin for WordPress is missing a capability and nonce check in several functions in versions up to, and including, 2.8.0. This allows attackers to perform actions such as sending test emails. • https://patchstack.com/database/vulnerability/woo-advanced-sales-report-email/wordpress-sales-report-email-for-woocommerce-plugin-2-8-auth-test-email-submission-vulnerability?_s_id=cve • CWE-862: Missing Authorization •