Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 - Unauthenticated Arbitrary Order Payment Bypass
mediumThe Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin for WordPress is vulnerable to Bypass Vulnerability in all versions up to, and including, 1.7.2. This is due to the transaction verification function accepted a caller-supplied amount and read the receiver address from global plugin settings...
- CVSS:
- 5.3 (Wordfence)
- Affected:
- up to 1.7.2
- Fixed in:
- 1.7.3
- Disclosed:
- Oct 9, 2026