CVE-2020-11497

Name of the Vulnerable Software and Affected Versions NAB Transact extension version 2.1.0 for the WooCommerce plugin for WordPress

Description An issue allows orders to be marked as fully paid by assigning an arbitrary bank transaction ID during the payment-details entry step, effectively bypassing the online payment system.

Recommendations For NAB Transact extension version 2.1.0, update to a newer version that contains a fix for this issue, as assigning arbitrary bank transaction IDs could lead to unauthorized order fulfillment. At the moment, there is no information about a newer version that contains a fix for this vulnerability.