WordPress Digital River Global Commerce plugin <= 2.0.2 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin Digital River Global Commerce versions = 2.0.2...

WordPress Digital River Global Commerce Plugin <= 2.0.2 is vulnerable to Backdoor

Software Digital River Global Commerce Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 094cc90dcba0 Credits Sansec.io Required privilege Unauthenticated Publishe...