Revolut Gateway For Woocommerce
Monthly
Broken access control in Revolut Gateway for WooCommerce allows unauthenticated remote attackers to reach restricted plugin endpoints and read protected data, yielding low confidentiality exposure with no integrity or availability impact. All plugin versions below 4.22.10 on WordPress/WooCommerce installations are affected. No public exploit or CISA KEV listing has been identified at time of analysis, and a vendor-released patch is available.
The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.
Broken access control in Revolut Gateway for WooCommerce allows unauthenticated remote attackers to reach restricted plugin endpoints and read protected data, yielding low confidentiality exposure with no integrity or availability impact. All plugin versions below 4.22.10 on WordPress/WooCommerce installations are affected. No public exploit or CISA KEV listing has been identified at time of analysis, and a vendor-released patch is available.
The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.