This vulnerability in WP SmartPay arises from improper validation of user-supplied quantity input. The flaw allows an attacker to manipulate the integrity of the system, potentially causing unauthorized or unintended behavior related to transaction quantities. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with low attack complexity and no confidentiality or availability impact, but a high impact on integrity.

The vulnerability impacts the integrity of the WP SmartPay plugin by allowing improper input validation of quantity fields. This could enable attackers to alter transaction quantities or related data, potentially leading to incorrect processing or financial discrepancies. There is no reported impact on confidentiality or availability. No known exploits are reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently referenced, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected plugin or implementing input validation controls at the application or web server level if feasible.