Description
PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerability in the update_fees AJAX handler that allows unauthenticated attackers to modify and read other customers' orders. Attackers can reuse a nonce from their own order-pay page and supply sequential order_id values to change payment methods, recalculate fees, and disclose order line items and totals.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
PI Websolution PiWeb Disable payment method / Partial payment for WooCommerce
Default version status: unaffected
0 to < 1.1.10.9affected
References
- https://plugins.svn.wordpress.org/disable-payment-method-for-woocommerce/tags/1.1.10.7/public/class-apply-order-fees.php ↗
- https://plugins.trac.wordpress.org/changeset/3751777/disable-payment-method-for-woocommerce ↗
- https://wordpress.org/plugins/disable-payment-method-for-woocommerce/ ↗
- https://www.vulncheck.com/advisories/piweb-disable-payment-method-partial-payment-for-woocommerce-before-1.1.10.9-missing-authorization-via-update-fees ↗