This vulnerability in the Live sales notification for WooCommerce plugin arises from missing authorization checks, which means that certain functions or data may be accessible without proper permissions. The affected versions are from initial releases through 2.3.60. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with low complexity, and results in limited confidentiality impact. No official patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows unauthorized access to some information due to missing authorization controls. The impact is limited to confidentiality loss, with no integrity or availability impact reported. There are no known active exploits in the wild, reducing immediate risk. However, the lack of authorization could expose sensitive sales notification data to unauthorized parties.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's functionality through other means such as web application firewalls or limiting user roles. Monitor vendor channels for updates and apply patches promptly once available.