CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in dreamfox Dreamfox Media Payment gateway per Product for Woocommerce woocommerce-product-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dreamfox Media Payment gateway per Product for Woocommerce: from n/a through <= 3.5.6.
Explanation of Vulnerability in Simple Terms
The Dreamfox Media Payment Gateway for WooCommerce plugin lacks proper authorization checks, allowing an attacker to modify payment settings or transaction data through a crafted request. The vulnerability requires user interaction—typically clicking a malicious link—and can affect both the plugin and the broader site. Integrity and availability of payment processing may be compromised.
What an attacker can do
Modify payment gateway settings or transaction records without proper authorization.
Potential impact on your site
Payment processing integrity may be compromised; attackers could alter transaction data or gateway configuration.
Conditions required to exploit
Attacker must trick a user into clicking a malicious link or visiting a crafted page.
Key dates
External resources
Related vulnerabilities
