Security Advisory

CVE-2023-3525

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-07-12 04:38:43

Last updated 2025-02-05 19:41:35

Assigner Wordfence

CVSS score 7.5

State PUBLISHED

Description

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without payment.

← Browse all CVEs View on cve.org ↗