High · published November 12, 2025
⚡ An unauthorized user could siphon off payment tokens with a simple request! The Braintree plugin for WooCommerce has a critical authorization bypass that could have serious repercussions for your customers! Think of this like a diner handing out their order number to strangers without verifying who they are — anyone could backdoor into the system and claim a free meal. When that order is a customer's payment method, it’s an all-you-can-eat buffet for fraudsters! An attacker could gain access to payment method nonces for any stored payment token, allowing them to perform unauthorized transactions, charge customer credit cards, or manipulate subscription payments. This could lead to devastating financial loss for both your business and your customers, breaching trust and potentially exposing sensitive information.
Think of this like a diner handing out their order number to strangers without verifying who they are — anyone could backdoor into the system and claim a free meal. When that order is a customer's payment method, it’s an all-you-can-eat buffet for fraudsters! The vulnerability exists due to a missing capability check on the wc-braintree/v1/3ds/vaulted_nonce REST API endpoint. It processes user-supplied token IDs without verifying ownership or authentication, allowing unauthenticated access.
An attacker could gain access to payment method nonces for any stored payment token, allowing them to perform unauthorized transactions, charge customer credit cards, or manipulate subscription payments. This could lead to devastating financial loss for both your business and your customers, breaching trust and potentially exposing sensitive information. Update the Braintree for WooCommerce plugin to version 3.2.79 or later to ensure the authorization checks are in place. Regularly audit your WooCommerce settings and monitor transactions for any suspicious activity. You've got this! By taking immediate action, you can protect your customers and restore their trust. 🛡️