Improper authentication in Automattic Woocommerce Payments
CVSS score
9.8
EPSS probability
%86.5
Risk score
8.5
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: WooCommerce Payments - Unauthorized Admin Access
Python research notes and tooling for CVE-2023-28121
WooCommerce Payments: Unauthorized Admin Access Exploit
CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]
Exploração prática de vulnerabilidade crítica no WordPress usando o plugin WooCommerce Payments.
CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]
WooCommerce Payments (WordPress plugin) =< 5.6.1 CVE-2023-28121 PoC
Similar Vulnerabilities
Vulnerability in Automattic Woocommerce
Vulnerability in Automattic Activitypub
Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)
WordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerability
WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-28121"