The Live sales notification plugin for WooCommerce on WordPress has a Missing Authorization vulnerability in all versions up to and including 2.3.39. The flaw exists because the getOrders function does not perform proper authorization checks, allowing unauthenticated attackers to access sensitive customer data such as buyer names, locations, purchase timestamps, and product details.