CVE-2024-0631 in Duitku Payment Gateway Plugin정보

요약

\~에 의해 MITRE • 2024. 03. 13.

The Duitku Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the check_duitku_response function in all versions up to, and including, 2.11.6. This makes it possible for unauthenticated attackers to change the payment status of orders to failed.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2024. 01. 16.

공개

2024. 03. 13.

모더레이션

수락

항목

VDB-254764

CPE

준비됨

CWE

CWE-862 (확인됨)

CVSS

5.3 (NVD)

EPSS

0.00630

KEV

아니요

활동

매우 낮음

부문

Hostingprovider

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-0631
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-0631
CVE Details	https://www.cvedetails.com/cve/CVE-2024-0631/

◂ 이전 개요 다음 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!