Skip to content
OpenAdvisories

Vendor

qqqjus

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Slek Gateway for WooCommerce <= 1.0 - Unauthenticated Insufficiently Protected Credentials via Payment Redirect Form Hidden Fields

    The Slek Gateway for WooCommerce plugin for WordPress is vulnerable to Information Exposure in version 1.0. This is due to the wsb_handle_slek_payment_redirect() function placing the merchant's slek_key and slek_secret API credentials directly into a client-s…