Description
WordPress Plugin WooCommerce-GloBee Payment Gateway is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass payment process and spoof real order status without actually paying for it. WordPress Plugin WooCommerce-GloBee Payment Gateway version 1.1.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.2 or latest
References
https://www.exploit-db.com/exploits/46414
https://github.com/GloBee-Official/woocommerce-payment-api-plugin/issues/3
Related Vulnerabilities
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-1468)
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27900)
WordPress Plugin Check & Log Email Cross-Site Scripting (0.3)
Moodle Resource Management Errors Vulnerability (CVE-2015-0217)
WordPress Plugin Ultimate Instagram Feed Unspecified Vulnerability (1.3)