Bng Gateway For Woocommerce Vulnerabilities

The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...

CVSS:

6.1

Affected:

up to 1.6.10

Fix:

No patched version reported

Disclosed:

Jul 18, 2023

CVE-2023-33999 on NVD →

The BNG Gateway For WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.10. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to add, edit, and delete payment methods via a forged...

CVSS:

8.8

Affected:

up to 1.6.10

Fix:

No patched version reported

Disclosed:

Jun 30, 2021