CVE-2024-1492 allows unauthorized access to sensitive data in the WPify Woo Czech WordPress plugin. This vulnerability exposes shipping details due to a missing capability check in the 'maybe_send_to_packeta' function, affecting versions up to 4.0.8. Unauthenticated attackers can exploit this to obtain order information if they know the order number. The low SVRS score of 30 suggests a lower immediate risk compared to critical vulnerabilities, but the potential for data exposure still warrants investigation. While rated as a CVSS 0, the vulnerability is marked as 'In The Wild', indicating active exploitation is possible. Businesses using this plugin should update immediately to mitigate the risk of unauthorized access to customer order and shipping data. This flaw underscores the importance of proper access controls in WordPress plugins to protect sensitive user information. Failure to address this could lead to privacy breaches and reputational damage.