The plugin does not perform adequate validation on the ‘webhook’ function, which can lead to an unauthenticated user changing their payment status to ‘APPROVED’ without making an actual payment.
CPE | Name | Operator | Version |
---|---|---|---|
integrar-getnet-con-woo | lt | 0.0.5 |