ID:5938 - Exploit for Security restrictions bypass in WooCommerce PayPal Checkout Payment Gateway - CVE-2019-7441

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass certain security restrictions.

The vulnerability exists due to application does not perform validation of the attacker-controlled data, assuming that data is valid and safe. A remote attacker can tamper with parameters, passed to the application, and change its flow, e.g. purchase and item for lower price.

Remediation