WooCommerce Eway Gateway, 25c033c851a6b18ed72fdc96796538b28f1b80c8

CVE, Research URL: 25c033c851a6b18ed72fdc96796538b28f1b80c8
Home page URL: Security reports for WooCommerce Eway Gateway
Application: WooCommerce Eway Gateway
Published on: Jan 05, 2023
Research Description: Eway Payments for Woo [woocommerce-gateway-eway] < 3.5.1 WordPress WooCommerce Eway Gateway Plugin <= 3.5.0 is vulnerable to Insecure Direct Object References (IDOR) Update the WordPress WooCommerce Eway Gateway plugin to the latest available version (at least 3.5.1). WordfenceTeam discovered and reported this Insecure Direct Object References (IDOR) vulnerability in WordPress WooCommerce Eway Gateway Plugin. An insecure direct object reference vulnerability could allow a malicious actor to bypass authorization, authentication, access sensitive files/folders or interact with the database. This vulnerability has been fixed in version 3.5.1.
Affected versions: max 3.5.1.
Status: vulnerable