CVE-2023-37971 – WooCommerce Product Stock Alert <= 2.0.1 - Missing Authorization via API

https://notcve.org/view.php?id=CVE-2023-37971

The WooCommerce Product Stock Alert plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the stock_alert_rest_routes_react_module action in versions up to, and including, 2.0.1. This makes it possible for authenticated attackers with subscriber-level access to use this endpoint intended for administrators. • CWE-862: Missing Authorization •