Description
The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauthenticated users to mark an arbitrary pending order as paid by confirming a smaller payment of their own against it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Paymattic | 4.6.20 – < 4.6.26 | 4.6.26 |
References
- https://wpscan.com/vulnerability/240a0440-7892-4c03-b282-2fdb6f086bb6/ exploit vdb-entry technical-description