Pay With Metamask For Woocommerce Cryptocurrency Payment Gateway
Monthly
An unauthenticated bypass in the 'Pay With MetaMask For WooCommerce - Cryptocurrency Payment Gateway' WordPress plugin (all versions up to and including 1.7.2) lets remote attackers circumvent the plugin's authenticity/verification checks, altering limited aspects of application state without logging in, per CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. Because the vector carries PR:N and UI:N, unauthenticated remote attackers can trigger the flaw on any site where the plugin is active, but the impact is confined to integrity only (I:L) with no confidentiality or availability effect, keeping this a moderate-severity issue rather than a critical one. No CISA KEV listing and no public exploit code were identified at time of analysis, and no EPSS signal was supplied; the affected population is limited to WordPress/WooCommerce sites running this niche cryptocurrency payment gateway.
An unauthenticated bypass in the 'Pay With MetaMask For WooCommerce - Cryptocurrency Payment Gateway' WordPress plugin (all versions up to and including 1.7.2) lets remote attackers circumvent the plugin's authenticity/verification checks, altering limited aspects of application state without logging in, per CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. Because the vector carries PR:N and UI:N, unauthenticated remote attackers can trigger the flaw on any site where the plugin is active, but the impact is confined to integrity only (I:L) with no confidentiality or availability effect, keeping this a moderate-severity issue rather than a critical one. No CISA KEV listing and no public exploit code were identified at time of analysis, and no EPSS signal was supplied; the affected population is limited to WordPress/WooCommerce sites running this niche cryptocurrency payment gateway.