Limited Black Friday Offer:
Security for everyone

WooCommerce Payments - Unauthorized Admin Access CVE-2023-28121 Scanner

WooCommerce Payments contains an Unauthorized Admin Access vulnerability.

SCAN NOW

Short Info

Level

Critical

Type

Single Scan

Can be used by

Asset Owner

Estimated Time

10 sec

Scan only one

Domain, Ipv4

Parent Category

WooCommerce Payments - Unauthorized Admin Access CVE-2023-28121 Scanner Detail

An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the plugin activated.