CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in PayPal PayPal Brasil para WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PayPal Brasil para WooCommerce: from n/a through 1.4.2.
Explanation of Vulnerability in Simple Terms
PayPal Brasil para WooCommerce versions up to 1.4.2 lack proper authorization checks on certain functions. A logged-in user with low privileges can modify payment-related settings or data without proper permission validation. The vulnerability does not expose sensitive data or cause service disruption, but allows unauthorized modification of site configuration.
What an attacker can do
Modify payment settings or transaction data without proper authorization.
Potential impact on your site
Unauthorized users could alter PayPal payment configuration, potentially disrupting transactions or redirecting payments.
Conditions required to exploit
Attacker must have a low-privilege account on the WooCommerce site (e.g., customer or subscriber role).
Key dates
External resources
Related vulnerabilities
