CERT24GHSA-f39h-p64c-xrvv: Improper authentication in the Payment Integration Wompi WordPress pluginLoading data…
CERT24Threat Observatory
Period

GHSA-f39h-p64c-xrvv: Improper authentication in the Payment Integration Wompi WordPress plugin

The Payment Integration Wompi WordPress plugin through version 4.0.1 does not verify the authenticity of incoming payment notifications on a stock installation because the callback checksum uses a merchant secret that remains empty until manually configured.

← Back to intelligence

GHSA-f39h-p64c-xrvv: Improper authentication in the Payment Integration Wompi WordPress plugin

The Payment Integration Wompi WordPress plugin through version 4.0.1 does not verify the authenticity of incoming payment notifications on a stock installation because the callback checksum uses a merchant secret that remains empty until manually configured.