Description
WordPress Plugin WooCommerce-GloBee Payment Gateway is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass payment process and spoof real order status without actually paying for it. WordPress Plugin WooCommerce-GloBee Payment Gateway version 1.1.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.2 or latest
References
https://www.exploit-db.com/exploits/46414
https://github.com/GloBee-Official/woocommerce-payment-api-plugin/issues/3
Related Vulnerabilities
LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-44967)
WordPress Plugin Yasr-Yet Another Stars Rating Unspecified Vulnerability (1.3.2)
PHP Use After Free Vulnerability (CVE-2015-1351)
MySQL Other Vulnerability (CVE-1999-1188)
WordPress Plugin Modula Image Gallery Cross-Site Scripting (1.3.5)