The vulnerability CVE-2024-37544 involves missing authorization checks in the Get Better Reviews for WooCommerce plugin by Saleswonder Team: Tobias, affecting versions up to 4.0.6. This allows users with low privileges to perform actions they should not be authorized to do, impacting the integrity of the plugin's functionality. The CVSS score of 4.3 reflects a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, and impact limited to integrity. No patch or official fix details are currently provided.

The vulnerability could allow an attacker with some level of privileges to perform unauthorized actions within the plugin, potentially altering data or behavior related to reviews in WooCommerce. There is no reported impact on confidentiality or availability, and no known active exploitation. The overall impact is limited to integrity with medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict user privileges to the minimum necessary and monitor for unusual activity related to the plugin. Avoid granting unnecessary permissions to users interacting with the Get Better Reviews for WooCommerce plugin.