CVE-2024-8678
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Sep 25, 2024
Updated: Oct 2, 2024
CWE ID 862
Summary
CVE-2024-8678 is a vulnerability affecting the Revolut Gateway for WooCommerce plugin for WordPress. This issue, present in versions up to 4.17.3, permits unauthenticated attackers to modify data unchecked through the /wc/v3/revolut REST API endpoint. Consequently, orders can be marked as completed, posing a significant risk to e-commerce sites using this plugin.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Revolut