CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in sumup SumUp Payment Gateway For WooCommerce sumup-payment-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SumUp Payment Gateway For WooCommerce: from n/a through <= 2.7.9.
Explanation of Vulnerability in Simple Terms
The SumUp Payment Gateway For WooCommerce plugin through version 2.7.9 lacks proper authorization checks, allowing unauthenticated attackers to disrupt the payment gateway's availability. An attacker can send network requests without authentication to trigger a denial-of-service condition. This affects all installations running the vulnerable version.
What an attacker can do
Make the payment gateway unavailable or unresponsive to legitimate transactions.
Potential impact on your site
Customers cannot complete purchases via SumUp; payment processing is disrupted until the site is patched.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
