Mintpay For Woocommerce
Monthly
Unauthenticated remote attackers can mark or cancel arbitrary WooCommerce orders and disclose customer contact details on stores running Mintpay for WooCommerce through version 2.2.3, because the plugin processes payment callbacks without verifying their authenticity. The issue is rated CVSS 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) and tracked as CWE-284; it is not reported as actively exploited, and the available PoC reference is not verified as working exploit code. Vuln.today prioritizes remediation this month.
Unauthenticated remote attackers can mark or cancel arbitrary WooCommerce orders and disclose customer contact details on stores running Mintpay for WooCommerce through version 2.2.3, because the plugin processes payment callbacks without verifying their authenticity. The issue is rated CVSS 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) and tracked as CWE-284; it is not reported as actively exploited, and the available PoC reference is not verified as working exploit code. Vuln.today prioritizes remediation this month.