The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST API route used during checkout, allowing unauthenticated attackers to modify shipping information stored on arbitrary orders. This vulnerability affects WordPress environments using the Razorpay for WooCommerce plugin, particularly those with publicly accessible checkout functionality. D [truncated]
A Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Razorpay for WooCommerce: from n/a through <= 4.8.2. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. Users of Razorpay for WooCommerce, especially those with versions from n/a through <= 4.8.2, should be aware [truncated]
