Flutterwave Woocommerce
Monthly
Broken authentication in the Flutterwave WooCommerce WordPress plugin (versions <= 3.3.0) allows unauthenticated remote attackers to bypass authentication controls via an alternate path or channel (CWE-288), resulting in limited integrity and availability impact. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no credentials, no user interaction, and no special network position, making it trivially accessible to any internet-connected attacker targeting WordPress sites running this payment gateway plugin. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Broken authentication in the Flutterwave WooCommerce WordPress plugin (versions <= 3.3.0) allows unauthenticated remote attackers to bypass authentication controls via an alternate path or channel (CWE-288), resulting in limited integrity and availability impact. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no credentials, no user interaction, and no special network position, making it trivially accessible to any internet-connected attacker targeting WordPress sites running this payment gateway plugin. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.