CVE Database /
CVE-2023-35916
CVE · High
CVE-2023-35916 — WooPayments: Integrated WooCommerce Payments [woocommerce-payments] < 5.9.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-35916
|
WooPayments: Integrated WooCommerce Payments [woocommerce-payments] < 5.9.1 |
Authorization Bypass Through User-Controlled Key |
High
7.5
|
< 5.9.1
|
5.9.1 |
2023-06-19 |
—
|
CVE-2023-35916
The WooCommerce Payments plugin contained an insecure direct object reference flaw in versions before 5.9.1 that could enable attackers to circumvent authentication and authorization controls to access restricted files, folders, or database information. Rafie Muhammad discovered and reported this vulnerability through Patchstack. The issue was resolved starting with version 5.9.1.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings