| Package | Affected versions | Patched versions |
|---|---|---|
| woocommerce payments | ≥ 4.8.0, < 4.8.2≥ 5.0.0, < 5.0.4≥ 5.1.0, < 5.1.3≥ 5.2.0, < 5.2.2≥ 5.5.0, < 5.5.2 | 4.8.25.0.45.1.35.2.25.5.2 |
| woopayments | = 4.9.0= 5.3.0= 5.4.0≥ 5.6.0, < 5.6.2 | 5.6.2 |
An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the plugin activated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free