Description
WordPress Plugin WooCommerce-GloBee Payment Gateway is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass payment process and spoof real order status without actually paying for it. WordPress Plugin WooCommerce-GloBee Payment Gateway version 1.1.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.2 or latest
References
https://www.exploit-db.com/exploits/46414
https://github.com/GloBee-Official/woocommerce-payment-api-plugin/issues/3
Related Vulnerabilities
WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)
XWiki Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-26479)
WordPress Plugin NextGEN Gallery-WordPress Gallery Remote Code Execution (2.1.59)
WordPress Plugin Login No Captcha reCAPTCHA Security Bypass (1.6.11)
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-1468)