Authorize.net Payment Gateway For WooCommerce, CVE-2024-2382

CVE, Research URL: CVE-2024-2382
Home page URL: Security reports for Authorize.net Payment Gateway For WooCommerce
Application: Authorize.net Payment Gateway For WooCommerce
Published on: Jun 04, 2024
Research Description: The Authorize.net Payment Gateway For WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 8.0. This is due to the plugin not properly verifying the authenticity of the request that updates a orders payment status. This makes it possible for unauthenticated attackers to update order payment statuses to paid bypassing any payment.
Affected versions: max 8.0.
Status: vulnerable