CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refresh_order_cvr_data AJAX action in versions up to 6.1.0. This makes it possible for authenticated attackers with contributor-level access and above, to update CVR numbers for orders.
Explanation of Vulnerability in Simple Terms
The WooCommerce CVR Payment Gateway plugin before version 6.1.0 does not properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify data they should not have access to. The vulnerability requires an active user account but no special role or admin status.
What an attacker can do
A logged-in user can modify data they should not have permission to change.
Potential impact on your site
Unauthorized users may alter payment gateway settings or related data, potentially affecting transactions or site configuration.
Conditions required to exploit
Attacker must have a valid user account on the site with at least basic login privileges.
Key dates
External resources
Related vulnerabilities
