Vulnerability CVE-2023-35916

Vulnerability CVE-2023-35916

Published: 2023-12-20

Description:

Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments ?? Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments ?? Fully Integrated Solution Built and Supported by Woo: from n/a through 5.9.0.

Type:

CWE-639

(Authorization Bypass Through User-Controlled Key)

References:

https://patchstack.com/database/vulnerability/woocommerce-payments/wordpress-woocommerce-payments-plugin-5-9-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve