CVE-2025-12955 | delabon Live Sales Notification for Woocommerce Plugin up to 2.3.39 on WordPress Customer Information getOrders authorization

A vulnerability, which was classified as problematic, was found in delabon Live Sales Notification for Woocommerce Plugin up to 2.3.39 on WordPress. This issue affects the function getOrders of the component Customer Information Handler. The manipulation results in missing authorization.

This vulnerability is cataloged as CVE-2025-12955. The attack may be launched remotely. There is no exploit available.