Threats tagged 'ghsa-92xq-fm7m-c8gr'

The Chargely Free Subscriptions For Woocommerce WordPress plugin up to version 1.0 has a vulnerability where it does not perform authorization checks on a REST API route that exposes its stored configuration. This flaw allows unauthenticated attackers to retrieve the live WooCommerce REST API consumer key and secret, which provide full read and write access to the entire store.