CVE-2024-0629
2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
The 2Checkout Payment Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the sniff_ins function in all versions up to, and including, 6.2. This makes it possible for unauthenticated attackers to make changes to orders and mark them as paid.
El complemento 2Checkout Payment Gateway para WooCommerce para WordPress es vulnerable a modificaciones no autorizadas de datos debido a una falta de verificación de capacidad en la función sniff_ins en todas las versiones hasta la 6.2 incluida. Esto hace posible que atacantes no autenticados realicen cambios en los pedidos y los marquen como pagados.
*Credits:
Francesco Carlucci
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-01-16 CVE Reserved
- 2024-04-15 CVE Published
- 2024-05-03 EPSS Updated
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-862: Missing Authorization
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://wordpress.org/plugins/woocommerce-2checkout-payment | ||
https://www.wordfence.com/threat-intel/vulnerabilities/id/bcc6a4a5-b133-4ee1-a345-a7c812624b03?source=cve |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Nmedia Search vendor "Nmedia" | 2Checkout Payment Gateway For WooCommerce Search vendor "Nmedia" for product "2Checkout Payment Gateway For WooCommerce" | <= 6.2 Search vendor "Nmedia" for product "2Checkout Payment Gateway For WooCommerce" and version " <= 6.2" | en |
Affected
|