CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3. This is due to /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost REST API endpoints not properly verifying a user's identity prior to setting the users ID and auth cookies. This makes it possible for unauthenticated attackers to create new administrative user accounts.
Explanation of Vulnerability in Simple Terms
The PayU CommercePro Plugin versions 3.8.3 and earlier contain an authentication bypass vulnerability. An attacker can gain unauthorized access to the plugin without valid credentials. The vulnerability affects all versions from 0 to 3.8.3 and allows complete compromise of confidentiality, integrity, and availability. Site administrators should update immediately to a version newer than 3.8.3.
What an attacker can do
Gain unauthorized access to the plugin and compromise the site without providing valid credentials.
Potential impact on your site
An attacker can read sensitive data, modify site content, or disrupt service without logging in.
Conditions required to exploit
Network access only; no authentication, user interaction, or special configuration required.
Key dates
External resources
Related vulnerabilities
