onepay Payment Gateway For WooCommerce < 1.1.3 - Missing Authorization to Unauthenticated Order Status Modification

Description

The onepay Payment Gateway For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the check_onepay_response function in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to mark any WooCommerce order as processing/completed.