WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability

CVE-2023-37969

What is CVE-2023-37969?

A missing authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows for the exploitation of improperly configured access control security levels. This flaw facilitates unauthorized actions on user accounts, granting attackers the capability to manipulate transactions and access sensitive data without the necessary permissions. The issue specifically affects all versions of the plugin from its initial release up to version 3.1. Website administrators are urged to review their access control settings to safeguard against potential exploitation.

References