Pay For Payment For Woocommerce
Monthly
Missing authorization in the Pay for Payment for WooCommerce WordPress plugin (all versions through 3.0.1) allows unauthenticated remote attackers to reach functionality that should require an elevated capability, with impact limited to a low-integrity effect. Per the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, base 5.3 Medium), no authentication or user interaction is required, but no data disclosure or denial of service results; the site must have the plugin installed and active at version 3.0.1 or earlier and the vulnerable action must be network-reachable. No confirmed active exploitation and no public exploit code were identified at time of analysis.
Missing authorization in the Pay for Payment for WooCommerce WordPress plugin (all versions through 3.0.1) allows unauthenticated remote attackers to reach functionality that should require an elevated capability, with impact limited to a low-integrity effect. Per the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, base 5.3 Medium), no authentication or user interaction is required, but no data disclosure or denial of service results; the site must have the plugin installed and active at version 3.0.1 or earlier and the vulnerable action must be network-reachable. No confirmed active exploitation and no public exploit code were identified at time of analysis.