Threats tagged 'ghsa-g2hh-vxh7-5vwh'

The Eupago Gateway for WooCommerce WordPress plugin versions 4.5.0 through 4.7.5 contains a vulnerability where it does not verify the authenticity of incoming payment-confirmation webhook requests in some configurations. This flaw allows unauthenticated attackers to forge payment confirmations and mark pending orders as paid without actual payment.