CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better-payment allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More: from n/a through <= 2.2.0.
Explanation of Vulnerability in Simple Terms
The Better Payment plugin for WordPress contains a vulnerability that allows attackers to modify data or disrupt service availability. No authentication is required, and the attack can be performed remotely without user interaction. The vulnerability affects all versions up to and including 2.2.0. Site administrators should update to a version newer than 2.2.0 when available.
What an attacker can do
Modify payment or donation data, or cause the plugin to become unavailable.
Potential impact on your site
Payment records or donation data could be altered, or the payment functionality could stop working.
Conditions required to exploit
None. The attacker needs only network access to the site.
Key dates
External resources
Related vulnerabilities
