CVE-2023-35876

Summary

CVE-2023-35876 is an authorization bypass vulnerability affecting the WooCommerce Square plugin, specifically versions from n/a to 3.8.1. Maliciously crafted user-controlled keys can trick the plugin into granting unauthorized access, leading to potential data theft or unintended modifications. This issue poses a serious risk to online stores using WooCommerce Square and highlights the importance of prompt patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.