CVE-2024-1119

Name of the Vulnerable Software and Affected Versions Order Tip for WooCommerce plugin for WordPress versions prior to 1.3.2

Description The issue allows unauthorized access to data due to a missing capability check on the export tips to csv() function. This makes it possible for unauthenticated attackers to export the plugin's order fees.

Recommendations For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider disabling the export tips to csv() function until a patch is available.