Description
The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint, allowing unauthenticated users to bypass payments
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Payment Plugins for PayPal WooCommerce | < 2.0.20 | 2.0.20 |
References
- https://wpscan.com/vulnerability/6ae19ba0-26ba-4ffa-94e3-3fe32cedcae1/ exploit vdb-entry technical-description