WooPayments: Integrated WooCommerce Payments, 1ad997f7b769fb925cf6bedd63b85b914e27cfc8

CVE, Research URL: 1ad997f7b769fb925cf6bedd63b85b914e27cfc8
Home page URL: Security reports for WooPayments: Integrated WooCommerce Payments
Application: WooPayments: Integrated WooCommerce Payments
Published on: Mar 23, 2023
Research Description: WooPayments: Integrated WooCommerce Payments [woocommerce-payments] < 5.6.2 WooCommerce Payments 4.8.0 - 5.6.1 Authentication Bypass and Privilege Escalation The WooCommerce Payments plugin is vulnerable to authentication bypass via the determine_current_user_for_platform_checkout function. This allows unauthenticated attackers to impersonate arbitrary users and perform some actions as the impersonated user, which can lead to site takeover.
Affected versions: Min -, max 5.6.2.
Status: vulnerable