CVE-2024-8678

Published: 2024-09-25T07:15Z

Last Modified: 2024-10-02T19:06Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions up to, and including, 4.17.3. This makes it possible for unauthenticated attackers to mark orders as completed. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt