Lucene search
PRIOn knowledge basePRION:CVE-2023-5132HistoryOct 21, 2023 - 2:15 a.m.
Design/Logic Flaw
2023-10-2102:15:00
PRIOn knowledge base
www.prio-n.com
3
soisy pagamento rateale
wordpress
unauthorized access
sensitive data
capability check
woocommerce
vulnerability
The Soisy Pagamento Rateale plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the parseRemoteRequest function in versions up to, and including, 6.0.1. This makes it possible for unauthenticated attackers with knowledge of an existing WooCommerce Order ID to expose sensitive WooCommerce order information (e.g., Name, Address, Email Address, and other order metadata).
| CPE | Name | Operator | Version |
|---|---|---|---|
| soisy_pagamento_rateale | le | 6.0.1 |
Related
cve
cve
CVE-2023-5132
2023-10-21 02:15:07
wpvulndb
wpvulndb
cvelist
cvelist
CVE-2023-5132
2023-10-21 01:53:41
nvd
nvd
CVE-2023-5132
2023-10-21 02:15:07
wordfence
wordfence