CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Payment Plugins Payment Plugins for PayPal WooCommerce pymntpl-paypal-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Plugins for PayPal WooCommerce: from n/a through <= 2.0.13.
Explanation of Vulnerability in Simple Terms
Payment Plugins for PayPal WooCommerce versions 2.0.13 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify payment-related data over the network. The vulnerability does not expose sensitive information or disrupt service availability, but attackers can alter transaction records or payment settings without authentication. Site owners should update to a version newer than 2.0.13 immediately.
What an attacker can do
Modify payment data or settings without logging in.
Potential impact on your site
Payment records or settings could be altered by unauthorized parties, affecting transaction integrity.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
