7.5
High
CVE-2023-35916 Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
Description
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments – Fully Integrated Solution Built and Supported by Woo: from n/a through 5.9.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WooPayments – Fully Integrated Solution Built and Supported by Woo 5.9 | earliest → 5.9.0 | No fix stated |
Other CVEs of WooPayments – Fully Integrated Solution Built and Supported by Woo
The 4 CVEs of WooPayments – Fully Integrated Solution Built and Supported by Woo →
CVE-2023-51503
Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution…
5.9
Medium
CVE-2023-35915
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic…
7.6
High
CVE-2023-49828
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic…
6.5
Medium