CVE-2023-37871

HIGH

WordPress WooCommerce GoCardless Gateway Plugin <= 2.5.6 is vulnerable to Insecure Direct Object References (IDOR)

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-37871 has a selected CVSS score of 8.2 (high).

Description

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce GoCardless.This issue affects GoCardless: from n/a through 2.5.6.

Description source: CVE List

Affected products and versions

1
ProductSourceVersion range

GoCardless

Browse WooCommerce / GoCardless

Default status: unaffected

CVE ListThrough 2.5.6affected

References

2