CVE-2023-3525

State: Published
Severity: 7.5 High
Published: Jul 12, 2023
Updated: Feb 5, 2025
Reserved: Jul 6, 2023

Description

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without payment.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	Wordfence

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Getnet Argentina para Woocommercewanderlustcodes	0.0.1 through 0.0.4Affected

References

https://www.wordfence.com/threat-intel/vulnerabilities/id/245e9117-ca63-458e-a094-60a759f5ec19?source=cve
https://www.youtube.com/watch?v=xTyWqh93AM0

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.