Description
WordPress Plugin WooCommerce-GloBee Payment Gateway is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently bypass payment process and spoof real order status without actually paying for it. WordPress Plugin WooCommerce-GloBee Payment Gateway version 1.1.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.2 or latest
References
https://www.exploit-db.com/exploits/46414
https://github.com/GloBee-Official/woocommerce-payment-api-plugin/issues/3
Related Vulnerabilities
TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-5104)
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9418)
Oracle JRE CVE-2018-2826 Vulnerability (CVE-2018-2826)
MongoDb Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-20924)