Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fx5w-fcjm-f678

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by assigning an arbitrary bank transaction ID during the payment-details entry step.

An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by assigning an arbitrary bank transaction ID during the payment-details entry step.

EPSS

Процентиль: 27%
0.00097
Низкий

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by assigning an arbitrary bank transaction ID during the payment-details entry step.

EPSS

Процентиль: 27%
0.00097
Низкий