Description
WordPress Plugin WooCommerce PayU India (PayUmoney-PayUbiz) is prone to parameter tampering. Attackers can exploit this issue by manipulating parameters exchanged between client and server in order to modify application data. WordPress Plugin WooCommerce PayU India (PayUmoney-PayUbiz) version 2.1.1 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin Spot.IM Comments Cross-Site Scripting (4.0.3)
phpMyAdmin Other Vulnerability (CVE-2005-3622)
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5489)
Jenkins Protection Mechanism Failure Vulnerability (CVE-2021-21696 )
WordPress Plugin WP Coder-add custom html, css and js code Cross-Site Request Forgery (2.5.2)