CVE-2023-52224 - WordPress Revolut Gateway for WooCommerce plugin <= 4.9.7 - Broken Access Control vulnerability

Back Back to CVE browser

MEDIUM

WordPress Revolut Gateway for WooCommerce plugin <= 4.9.7 - Broken Access Control vulnerability

Published Jun 11, 2024

4.3

MEDIUM

CVSS 3.1

EPSS 0.60%

Description

Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7.

Affected products

Vendor Revolut Product Revolut Gateway for WooCommerce Default
unaffected
Affected
- ≤ 4.9.7

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Revolut	Revolut Gateway for WooCommerce	unaffected	Affected ≤ 4.9.7

Remediation

Vendor solution

Update to 4.9.8 or a higher version.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-56897		Advisory
https://patchstack.com/database/vulnerability/revolut-gateway-for-woocommerce/wordpress-revolut-gateway-for-woocommerce-plugin-4-9-5-broken-access-control-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Jun 11, 2024

Updated Apr 28, 2026

Reserved Dec 29, 2023

Link CVE-2023-52224

CISA Vulnrichment

Updated Jun 11, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2023-52224

Red Hat

No data

ENISA EUVD

Assigner Patchstack

Published Jun 11, 2024

Updated Apr 28, 2026

Link EUVD-2023-56897

GitHub

No data