Threats tagged 'ghsa-563r-v2v8-6c3q'

The PayDunya WooCommerce Payment Gateway WordPress plugin versions through 1.1.6 fails to verify the authenticity of incoming payment notifications properly. This flaw allows unauthenticated attackers to mark arbitrary WooCommerce orders as paid and completed by exploiting the use of an empty secret value for authentication until the gateway is configured.