Vulnerabilities > Woocommerce > Payu India Payment Gateway

DATE CVE VULNERABILITY TITLE RISK
2019-08-29 CVE-2019-14978 Improper Input Validation vulnerability in Woocommerce Payu India Payment Gateway 2.1.1
/payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress allows Parameter Tampering in the purchaseQuantity=1 parameter, as demonstrated by purchasing an item for lower than the intended price.
network
low complexity
woocommerce CWE-20
5.3
5.3