3 matches found
CVE-2024-0629
The 2Checkout Payment Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the sniffins function in all versions up to, and including, 6.2. This makes it possible for unauthenticated attackers to make changes to order...
CVE-2024-0629
The CVE-2024-0629 entry concerns the WordPress plugin “2Checkout Payment Gateway for WooCommerce.” All versions up to and including 6.2 are affected by an unauthorized data modification flaw caused by a missing capability check in the sniff_ins function, enabling unauthenticated attackers to alte...
CVE-2024-0629 2Checkout Payment Gateway for WooCommerce <= 6.2 - Missing Authorization via sniff_ins
The 2Checkout Payment Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the sniffins function in all versions up to, and including, 6.2. This makes it possible for unauthenticated attackers to make changes to order...