Threats tagged 'ghsa-2fq4-286q-f47x'

The Payconiq WordPress plugin versions through 1.0.4 have a vulnerability where the plugin does not verify if a visitor is authorized to view an order before returning its confirmation link. This flaw allows unauthenticated users to obtain the key for any paid order and, for recent guest orders, access the customer's personal details.