PT-2024-17518

Name of the Vulnerable Software and Affected Versions Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress versions up to, and including, 2.12.17 Description The issue allows unauthorized access to data due to a missing capability check on the "/wp-json/depay/wc/debug" REST API...

CVE-2024-12265: Missing Authorization

The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/depay/wc/debug REST API endpoint in all versions up to, and including, 2.12.17. This makes it possible for unauthenticated attacker...