The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST API route used during checkout, allowing unauthenticated attackers to modify the shipping information stored on arbitrary orders.
Тип уязвимости (CWE)
Уязвимые продукты
unknown:razorpay for woocommerce