Unauthorized Access to Sensitive Information via Insufficient Access Controls

CVE-2024-38747

What is CVE-2024-38747?

A vulnerability in HitPay Payment Gateway for WooCommerce allows unauthorized access to sensitive information due to inadequate access controls. This issue permits unauthorized actors to exploit functionalities that are not properly constrained, potentially leading to the exposure of confidential user data. The impacted versions include all versions up to 4.1.3, which emphasizes the need for immediate attention and security measures to mitigate risks associated with this vulnerability.

References