WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability

CVE-2023-37969

What is CVE-2023-37969?

A missing authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows for the exploitation of improperly configured access control security levels. This flaw facilitates unauthorized actions on user accounts, granting attackers the capability to manipulate transactions and access sensitive data without the necessary permissions. The issue specifically affects all versions of the plugin from its initial release up to version 3.1. Website administrators are urged to review their access control settings to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References