Trust Payments Gateway For Woocommerce
Monthly
Unauthenticated attackers can mark arbitrary WooCommerce orders as paid without any payment being made by abusing the hosted-payment return handler in the Trust Payments Gateway for WooCommerce plugin at versions before 3.1.0. Because that callback is not checked for authenticity, not bound to a specific order, and not validated against the amount paid, a single forged request to the public return endpoint is enough to flip an order to paid, and the same path can expose order and customer details. Publicly available exploit code exists (WPScan), but EPSS is low at 0.17% (5th percentile) and CISA's SSVC assessment records no exploitation, so this is a genuine but moderate-priority integrity and data-exposure issue rather than a mass-exploitation event.
Unauthenticated attackers can mark arbitrary WooCommerce orders as paid without any payment being made by abusing the hosted-payment return handler in the Trust Payments Gateway for WooCommerce plugin at versions before 3.1.0. Because that callback is not checked for authenticity, not bound to a specific order, and not validated against the amount paid, a single forged request to the public return endpoint is enough to flip an order to paid, and the same path can expose order and customer details. Publicly available exploit code exists (WPScan), but EPSS is low at 0.17% (5th percentile) and CISA's SSVC assessment records no exploitation, so this is a genuine but moderate-priority integrity and data-exposure issue rather than a mass-exploitation event.