WordPress Plugin Vulnerabilities

Yaad Sarig Payment Gateway For WC < 2.2.5 - Subscriber+ Log Read/Deletion

Description

The plugin is vulnerable to unauthorized modification & access of data due to a missing capability check on the yaadpay_view_log_callback() and yaadpay_delete_log_callback() functions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and delete logs.

Affects Plugins

Plugin icon
yaad-sarig-payment-gateway-for-wc
Fixed in 2.2.5

References

CVE
CVE-2024-10665
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/10409673-43dc-4c05-a996-120d753ebd6d

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
5.4 (medium)

Miscellaneous

Original Researcher
BrokenAC ignore
Verified
No
WPVDB ID
70e9db93-285d-40e9-ab95-8925f1b54249

Timeline

Publicly Published
2024-11-19 (about 1 year ago)
Added
2024-11-19 (about 1 year ago)
Last Updated
2024-12-05 (about 1 year ago)

Other

Published
Title
Published
2024-05-03
Title
ShopLentor (formerly WooLentor) < 2.8.8 - Missing Authorization
Published
2025-04-01
Title
MyBookProgress by Stormhill Media <= 1.0.8 - Missing Authorization
Published
2026-01-08
Title
Tutor LMS – eLearning and online course solution < 3.9.4 - Missing Authorization to Authenticated (Subscriber+) Course Enrollment Bypass
Published
2025-04-30
Title
NewsBlogger < 0.2.5.2 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2025-09-08
Title
Goza - Nonprofit Charity WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation