WooCommerce Eway Gateway, 25c033c851a6b18ed72fdc96796538b28f1b80c8
- CVE, Research URL
- Home page URL
- Application
- Published on
- Jan 05, 2023
- Research Description
- Eway Payments for Woo [woocommerce-gateway-eway] < 3.5.1 WordPress WooCommerce Eway Gateway Plugin <= 3.5.0 is vulnerable to Insecure Direct Object References (IDOR) Update the WordPress WooCommerce Eway Gateway plugin to the latest available version (at least 3.5.1). WordfenceTeam discovered and reported this Insecure Direct Object References (IDOR) vulnerability in WordPress WooCommerce Eway Gateway Plugin. An insecure direct object reference vulnerability could allow a malicious actor to bypass authorization, authentication, access sensitive files/folders or interact with the database. This vulnerability has been fixed in version 3.5.1.
- Affected versions
-
max 3.5.1.
- Status
-
vulnerable