The WooCommerce Payments Plugin installed on the remote host is affected by an authentication bypass vulnerability.
Note that the scanner has not tested for these issues but has instead relied only on the applicationβs self-reported version number.
No source data
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28121
developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/
wordpress.org/plugins/woocommerce-payments
www.wordfence.com/blog/2023/03/psa-update-now-critical-authentication-bypass-in-woocommerce-payments-allows-site-takeover/