The vulnerability identified as CVE-2024-37201 in the javmah Woocommerce Customers Order History plugin is classified under CWE-862 (Missing Authorization). It affects versions up to 5.2.2 and involves incorrect access control configurations that could allow unauthorized users to access or manipulate order history data. The CVSS 3.1 score of 4.3 reflects a medium severity with network attack vector, low attack complexity, requiring low privileges and no user interaction, impacting integrity but not confidentiality or availability. No patch or official remediation level has been provided by the vendor as of the published date.

The vulnerability could allow an attacker with low privileges to perform unauthorized actions related to customers' order history, potentially leading to integrity issues such as modification or manipulation of order data. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor vendor communications for updates. Until a patch is available, restrict access to the plugin features to trusted users only and review access control configurations where possible.