CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in iPOSPays iPOSpays Gateways WC ipospays-gateways-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iPOSpays Gateways WC: from n/a through <= 1.3.7.
Explanation of Vulnerability in Simple Terms
iPOSpays Gateways WC versions 1.3.7 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify data through the network. The vulnerability does not expose sensitive information or disrupt service availability, but attackers can alter records without needing credentials or user interaction.
What an attacker can do
Modify data on the site without authentication.
Potential impact on your site
Unauthorized changes to payment gateway settings or transaction records without detection of who made them.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
