Vulnerabilities

TI-2024-00393 CVE-2024-0431 · GHSA-mcfj-9jjf-96q9

Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_set_default_card

LOW 20

The Gestpay for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 20221130.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00295 Published 2024-02-28 No fix listed CWE-352

TI-2024-00394 CVE-2024-0432 · GHSA-5jrc-78c2-4pq8

LOW 20

The Gestpay for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 20221130.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00275 Published 2024-02-28 No fix listed CWE-352

TI-2024-00395 CVE-2024-0433 · GHSA-h63h-pmj2-4jvv

LOW 20

The Gestpay for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 20221130.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00275 Published 2024-02-28 No fix listed CWE-352