Medium · 4.3 CVE-2024-33585 EUVD-2024-31322GHSA-jh84-c2j7-r7w4

WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 2.12.1 - Broken Access Control vulnerability

Published Apr 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Tyche Softwares Product: Payment Gateway Based Fees and Discounts for WooCommerce Category: Web / CMS

Description

Missing Authorization vulnerability in Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce.This issue affects Payment Gateway Based Fees and Discounts for WooCommerce: from n/a through 2.12.1.

Affected products

Vendor	Product	Affected	Fixed
Tyche Softwares	Payment Gateway Based Fees and Discounts for WooCommerce	≤ 2.12.1	—

References

https://patchstack.com/database/vulnerability/checkout-fees-for-woocommerce/wordpress-payment-gateway-based-fees-and-discounts-for-woocommerce-plugin-2-12-1-broken-access-control-vulnerability?_s_id=cve vdb-entry