PT-2019-18614 · Woocommerce · Woocommerce Paypal Checkout Payment Gateway

Vikas Chaudhary · Published 2019-03-20 · Updated 2024-08-04 · CVE-2019-7441

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WooCommerce PayPal Checkout Payment Gateway plugin version 1.6.8

Description The issue allows Parameter Tampering in an amount parameter, such as amount 1, in the /cgi-bin/webscr?cmd= cart endpoint. This can be exploited by purchasing an item for a lower price than intended. However, the plugin author notes that the amount is validated against the WooCommerce order total before completing the order. If the amounts do not match, the order will be left in an "On Hold" state.

Recommendations For version 1.6.8, consider restricting the use of the amount 1 parameter in the /cgi-bin/webscr?cmd= cart endpoint until a patch is available. Additionally, monitor orders for discrepancies between the intended and actual prices to minimize potential financial losses. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2019-7441

Affected Products

Woocommerce Paypal Checkout Payment Gateway

References · 7

• 🔥 https://exploit-db.com/exploits/46632 · Exploit
• 🔥 https://gkaim.com/cve-2019-7441-vikas-chaudhary · Exploit
• https://osv.dev/vulnerability/CVE-2019-7441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7441 · Security Note
• https://t.me/cvenotify/89061 · Telegram Post
• https://wordpress.org/support/topic/vulnerabilty-in-plugin/#post-11899173 · Note
• http://packetstormsecurity.com/files/152362/WordPress-PayPal-Checkout-Payment-Gateway-1.6.8-Parameter-Tampering.html · Note