CVE-2023-3525 - CVE House
Back to Database
Status published High CVE-2023-3525

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable...

Vulnerability Description

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without payment.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-3525

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Kijam López

References

Affected Vendor

wanderlustcodes

View all reports →

Affected Software

Getnet Argentina para Woocommerce
Vulnerable Versions:
0.0.1

Timeline

Official Publish: July 12th, 2023
Last Modified: February 5th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.