CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The WooCommerce Square plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.1 via the get_token_by_id function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to expose arbitrary Square "ccof" (credit card on file) values and leverage this value to potentially make fraudulent charges on the target site.
Explanation of Vulnerability in Simple Terms
WooCommerce Square versions 4.2.0 through 4.2.2 expose sensitive payment information due to improper access controls. An attacker on the network can read confidential data without authentication or user interaction. Update to version 4.2.3 or later to patch this vulnerability.
What an attacker can do
Read sensitive payment or customer data from the WooCommerce Square integration without logging in.
Potential impact on your site
Customer payment information or other confidential data may be exposed to unauthenticated attackers.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
