The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the wpep_square_disconnect() function in all versions up to, and including, 4.2.3. This makes it possible for unauthenticated attackers to disconnect square.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published: 2024-07-24T03:17:16.440Z
Updated: 2024-08-01T21:25:02.959Z
Reserved: 2024-06-11T13:40:46.469Z
Link: CVE-2024-5861
Vulnrichment
Updated: 2024-08-01T21:25:02.959Z
NVD
Status : Modified
Published: 2024-07-24T04:15:04.517
Modified: 2024-11-21T09:48:29.607
Link: CVE-2024-5861
Redhat
No data.