CVE-2020-11497

The CVE-2020-11497 entry concerns the WordPress WooCommerce NAB Transact plugin (version 2.1.0). A payment bypass vulnerability exists because the plugin does not validate the origin of payment processor status requests, allowing an attacker to mark orders as fully paid by issuing a crafted GET r...