PT-2026-107401 · WordPress · Yaad Sarig Payment Gateway For Wc
CVSS v3.1
4.3
متوسطة
| المتجه | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Yaad Sarig Payment Gateway For WC WordPress versions prior to 2.2.13
Description
Insufficient authorization verification in several order payment-processing actions allows any authenticated user, including those with subscriber roles, to act on and modify orders belonging to other customers.
Recommendations
Update Yaad Sarig Payment Gateway For WC WordPress to version 2.2.13 or later.
استغلال
إصلاح
IDOR
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Yaad Sarig Payment Gateway For Wc