Critical · published January 7, 2025
🚨 An unauthenticated attack is all it takes to create a new admin account! The PayU CommercePro Plugin for WordPress is exposed in all versions up to 3.8.3. 🔥 Think of it like a restaurant where anyone can walk in and sign their name as the new manager without being questioned — chaos is bound to ensue! An attacker could stroll into your WordPress site, create an administrative user, and gain full access to sensitive information, settings, and even the power to delete everything! This vulnerability could lead to complete control of your site, making it a nightmare scenario for anyone relying on this plugin.
Think of it like a restaurant where anyone can walk in and sign their name as the new manager without being questioned — chaos is bound to ensue! The vulnerability arises from the /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost API endpoints not properly verifying user identities before setting user IDs and auth cookies, allowing unauthorized users to escalate their privileges.
An attacker could stroll into your WordPress site, create an administrative user, and gain full access to sensitive information, settings, and even the power to delete everything! This vulnerability could lead to complete control of your site, making it a nightmare scenario for anyone relying on this plugin. To secure your site, immediately update the PayU CommercePro Plugin to version 3.8.4 or later. Additionally, review any user accounts created during this time to ensure they are legitimate. Implement stricter authentication processes for API calls to mitigate future risks. You’ve got this! Secure your site now and restore peace of mind. 🛡️