CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay for WooCommerce: from n/a through <= 4.8.2.
Explanation of Vulnerability in Simple Terms
The Razorpay for WooCommerce plugin through version 4.8.2 lacks proper authorization checks on certain functions. An attacker without authentication can modify payment-related data or settings, potentially altering transaction records or payment configurations. This affects the integrity of payment processing on affected WooCommerce stores.
What an attacker can do
Modify payment data or plugin settings without authentication.
Potential impact on your site
Attackers can alter payment records, configurations, or transaction data without logging in.
Conditions required to exploit
Network access to the WooCommerce site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
