CVE-2023-3525

7.5 highEPSS 0.8%

High (7.5) in getnet argentina para woocommerce project getnet argentina para woocommerce. EPSS 0.8% chance of exploitation in the next 30 days.

The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in versions up to, and including, 0.0.4. This makes it possible for unauthenticated attackers to set their payment status to 'APPROVED' without payment.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
Published: 2023-07-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

getnet_argentina_para_woocommerce_project:getnet_argentina_para_woocommerce

References

https://www.wordfence.com/threat-intel/vulnerabilities/id/245e9117-ca63-458e-a094-60a759f5ec19?source=cve
https://www.youtube.com/watch?v=xTyWqh93AM0
https://www.wordfence.com/threat-intel/vulnerabilities/id/245e9117-ca63-458e-a094-60a759f5ec19?source=cve
https://www.youtube.com/watch?v=xTyWqh93AM0

Check your stack JSON