Vendor
rupantorpay
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
Rupantorpay <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification
The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_webhook() function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to mod…