Cryptocurrency Payment Gateway for WooCommerce Missing Authorization Vulnerability Allowing Unauthenticated Tracking Status Modification
Vulnerability
A vulnerability exists in the Cryptocurrency Payment Gateway for WooCommerce plugin for WordPress, in all versions through 2.0.22. The issue arises from a lack of proper capability checks in the 'handle_optin_optout' function, allowing unauthenticated attackers to manipulate tracking preferences. This unauthorized data modification could lead to unwanted tracking opt-ins or opt-outs.
Impact
Exploitation of this vulnerability allows for unauthorized changes to tracking preferences, potentially disrupting intended tracking functionalities or data collection processes.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.