CVE-2024-8678

MEDIO 5.3CVE-2024-8678 · Published 25/09/2024 · updated 17/06/2026

In breve

CVE-2024-8678 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda revolut gateway for woocommerce (revolut).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.33%, superiore al 25.9% delle vulnerabilità.
Correzione: aggiornare a 4.17.4 o successiva.

Package	Affected versions	Patched versions
revolut gateway for woocommerce revolut	`< 4.17.4`	`4.17.4`

Description

The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions up to, and including, 4.17.3. This makes it possible for unauthenticated attackers to mark orders as completed.

References

plugins.trac.wordpress.org/changeset/3153063 · Patch
wordfence.com/threat-intel/vulnerabilities/id/74dad6f0-0760-4420-b8cc-dc84cafd9b0d · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free