Skip to content
OpenAdvisories

Vendor

rupantorpay

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    Rupantorpay <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification

    The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_webhook() function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to mod…