CVE-2024-8678

MOYENNE 5.3CVE-2024-8678 · Published 25/09/2024 · updated 17/06/2026

En bref

CVE-2024-8678 est une vulnérabilité MOYENNE (CVSS 5.3) touchant revolut gateway for woocommerce (revolut).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.33%, plus élevée que 25.9% des vulnérabilités.
Correctif : mettre à jour vers 4.17.4 ou plus récent.

Package	Affected versions	Patched versions
revolut gateway for woocommerce revolut	`< 4.17.4`	`4.17.4`

Description

The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions up to, and including, 4.17.3. This makes it possible for unauthenticated attackers to mark orders as completed.

References

plugins.trac.wordpress.org/changeset/3153063 · Patch
wordfence.com/threat-intel/vulnerabilities/id/74dad6f0-0760-4420-b8cc-dc84cafd9b0d · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free