Patch Diffing CVE-2023-28121 to Compromise a WooCommerce

Back in March 2023, I noticed an interesting security advisory that was published by Wordfence about a critical “Authentication Bypass and Privilege Escalation” (aka CVE-2023-28121) affecting the “WooCommerce Payments” plugin which has more than 600.000 active installs according to WordPress. Since one of my customers was running a WooCommerce instance with the vulnerable version of […]

advisory authentication authentication bypass back bypass compromise critical customers cve cve-2023-28121 escalation exploit instance march patch patch diffing payments plugin privilege privilege escalation running security security advisory vulnerable woocommerce wordfence wordpress