CVE-2023-2179

CVE-2023-2179 concerns the WooCommerce Order Status Change Notifier WordPress plugin (versions up to 1.1.0). The connected sources confirm a lack of authorization and CSRF protection when performing an AJAX-based order-status update, which is accessible to any authenticated user, potentially enab...