B4Shu206

**Name of the Vulnerable Software and Affected Versions** NOWPayments for WooCommerce versions prior to 1.4.1 **Description** The NOWPayments for WooCommerce – Crypto Payment Gateway plugin for WordPress contains a broken access control flaw. This issue occurs because of a missing capability check within a function, allowing unauthenticated attackers to perform unauthorized actions. **Recommendations** Update the plugin to a version later than 1.4.0.

**Name of the Vulnerable Software and Affected Versions** TeraWallet – For WooCommerce versions n/a through 1.5.15 **Description** A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows leveraging race conditions within the software. **Recommendations** Update TeraWallet – For WooCommerce to a version later than 1.5.15.