Vulnerabilities > CVE-2024-5861 - Missing Authorization vulnerability in Wpeasypay WP Easypay

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

LOW

network

low complexity

wpeasypay

CWE-862

NVD

Published: 2024-07-24

Updated: 2024-07-29

Summary

The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the wpep_square_disconnect() function in all versions up to, and including, 4.2.3. This makes it possible for unauthenticated attackers to disconnect square.

Vulnerable Configurations

Part	Description	Count
Application	Wpeasypay Wpeasypay WP Easypay - Wpeasypay WP Easypay 1.0 Wpeasypay WP Easypay 1.2 Wpeasypay WP Easypay 1.3 Wpeasypay WP Easypay 1.3.1 Wpeasypay WP Easypay 1.8 Wpeasypay WP Easypay 2.0 Wpeasypay WP Easypay 2.2 Wpeasypay WP Easypay 2.3.4 Wpeasypay WP Easypay 2.5.1 Wpeasypay WP Easypay 2.5.2 Wpeasypay WP Easypay 2.5.3 Wpeasypay WP Easypay 2.5.4 Wpeasypay WP Easypay 2.5.5 Wpeasypay WP Easypay 2.5.6 Wpeasypay WP Easypay 2.5.7 Wpeasypay WP Easypay 3.0.5 Wpeasypay WP Easypay 3.0.6 Wpeasypay WP Easypay 3.0.7 Wpeasypay WP Easypay 3.0.8 Wpeasypay WP Easypay 3.0.9 Wpeasypay WP Easypay 3.1.0 Wpeasypay WP Easypay 3.1.1 Wpeasypay WP Easypay 3.1.2 Wpeasypay WP Easypay 3.1.3 Wpeasypay WP Easypay 3.1.4 Wpeasypay WP Easypay 3.1.5 Wpeasypay WP Easypay 3.1.6 Wpeasypay WP Easypay 3.1.7 Wpeasypay WP Easypay 3.1.8 Wpeasypay WP Easypay 3.1.9 Wpeasypay WP Easypay 3.2.0 Wpeasypay WP Easypay 3.2.3 Wpeasypay WP Easypay 3.2.4 Wpeasypay WP Easypay 3.2.5 Wpeasypay WP Easypay 3.2.6 Wpeasypay WP Easypay 3.2.7 Wpeasypay WP Easypay 4.0.0 Wpeasypay WP Easypay 4.0.1 Wpeasypay WP Easypay 4.0.2 Wpeasypay WP Easypay 4.0.3 Wpeasypay WP Easypay 4.0.4 Wpeasypay WP Easypay 4.1 Wpeasypay WP Easypay 4.2 Wpeasypay WP Easypay 4.2.1 Wpeasypay WP Easypay 4.2.2 Wpeasypay WP Easypay 4.2.3	47

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References