Description
The GetPaid WordPress plugin from 2.8.63 to 2.8.64 does not ensure item quantities on its payment forms are whole numbers, allowing unauthenticated users to have an invoice for a priced item marked as paid without being charged.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | GetPaid | 2.8.63 – < 2.8.65 | 2.8.65 |
References
- https://wpscan.com/vulnerability/62c1a6ac-0f9f-4402-b72b-8b10ffe6989c/ exploit vdb-entry technical-description