Printaura-WooCommerce WordPress Plugin Unauthenticated REST API Access Flaw

The Printaura-WooCommerce WordPress plugin through 4.0.2 contains an improper access restriction vulnerability. It does not properly restrict access to the WooCommerce REST API, causing every WooCommerce REST route to accept unauthenticated requests.

This allows unauthenticated attackers to read and modify store data, including:

• Customer orders and personal information
• Store and payment settings
• Webhooks