Threats tagged 'ghsa-jcp7-hvh9-8xxq'

The PAYCOMET for WooCommerce WordPress plugin versions before 5.46 contain a vulnerability where the cryptographic signature on payment notification requests related to tokenisation operations is not verified. This flaw allows unauthenticated attackers to overwrite stored payment tokens linked to existing orders and delete saved card records.