CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through 4.1.0.
Explanation of Vulnerability in Simple Terms
BitPay Checkout for WooCommerce versions up to 4.1.0 lack proper authorization checks on certain operations. An attacker on the network can modify data without authentication or user interaction. The vulnerability affects the integrity of transactions or settings processed through the plugin.
What an attacker can do
Modify payment or checkout data without logging in.
Potential impact on your site
Attackers can alter payment information, order details, or plugin settings without authorization.
Conditions required to exploit
Network access to the WooCommerce site; no authentication required.
Key dates
External resources
Related vulnerabilities
