Paid Memberships Pro CCBill Gateway <= 0.3 - Insufficient Authorization
mediumThe Paid Memberships Pro CCBill Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient verification on user accounts in the /webhooks.php file in versions up to, and including, 0.3. This makes it possible for unauthenticated attackers to modify purchase details for accounts.
- CVSS:
- 5.3
- Affected:
- up to 0.3
- Fixed in:
- 0.4
- Disclosed:
- Aug 17, 2023