Active Exploitation of WooCommerce Payments Improper Authentication Vulnerability (CVE-2023-28121)

What is WooCommerce Payments?




WooCommerce Payments is a popular e-commerce payment plugin for WordPress designed for small to large-sized online merchants using WordPress. According to Woo, the plugin has over 600,000 active installations.








What is the Attack?




CVE-2023-28121 is an authentication bypass vulnerability affecting the WooCommerce Payments plugin version 4.8.0 through 5.6.1. Successful exploitation of the vulnerability could allow an unauthorized attacker to gain admin privileges on the WordPress websites installed with the vulnerable version of the plugin enabled.


According …

attack authentication authentication bypass bypass bypass vulnerability commerce cve cve-2023-28121 e-commerce exploitation large payment payments plugin popular version vulnerability what is woocommerce woocommerce payments woocommerce payments plugin wordpress