WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce vulnerabilities
1 known vulnerability in WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce from Wpify. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest first
- 8.0 High severity
WPify Woo – Withdrawal, CRN/VAT, QR payments…: Improper Privilege Management
The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 5.4.16. This is due to the SettingsApi::save_option() REST route (POST /wp-json/wpify-woo/v1/option) passing the request-supplied 'option' and 'data' par