CVE-2024-38742

Summary

CVE-2024-38747 is a vulnerability affecting HitPay Payment Gateway for WooCommerce. The issue exposes sensitive information to unauthorized actors by not properly constraining access control lists (ACLs). This vulnerability allows attackers to access functionality beyond their intended level of access, affecting HitPay Payment Gateway for WooCommerce versions from n/a through 4.1.3.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.