CVE-2023-3525

HIGH 7.5CVE-2023-3525 · Published 12/07/2023 · updated 17/06/2026

In short

CVE-2023-3525 is a HIGH (CVSS 7.5) vulnerability affecting getnet argentina para woocommerce (getnet argentina para woocommerce project).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.8% of all vulnerabilities.
Fix: update to 0.0.5 or later.

Package	Affected versions	Patched versions
getnet argentina para woocommerce getnet_argentina_para_woocommerce_project	`≥ 0.0.1, < 0.0.5`	`0.0.5`

Description

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without payment.

References

wordfence.com/threat-intel/vulnerabilities/id/245e9117-ca63-458e-a094-60a759f5ec19 · Third Party Advisory
youtube.com/watch · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free