CVE-2018-20782

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• WordPress Plugin WooCommerce - GloBee (cryptocurrency) Payment Gateway 1.1.1 - Payment Bypass / Unauthorized Order Status Spoofing2019-02-18 · webapps · php

Impact

The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/GloBee-Official/woocommerce-payment-api-plugin/issues/3
• https://github.com/GloBee-Official/woocommerce-payment-api-plugin/pull/2
• https://www.exploit-db.com/exploits/46414/
• https://github.com/GloBee-Official/woocommerce-payment-api-plugin/issues/3
• https://github.com/GloBee-Official/woocommerce-payment-api-plugin/pull/2
• https://www.exploit-db.com/exploits/46414/