{"action":"Upgrade cardgate/woocommerce to 3.1.16 or later.","affected":[{"fixed":"3.1.16","introduced":"0"}],"component":"cardgate/woocommerce","cve_ids":["CVE-2020-8819"],"ecosystem":"Packagist","epss":0.04877,"exploited":false,"fixed_versions":["3.1.16"],"ghsa_id":"GHSA-5pq5-9phv-q5j3","id":"tcs_01M5KEW92ZNF0MX2MHNVD4J625","modified_at":"2023-11-08T04:04:18.596834Z","published_at":"2022-05-24T17:09:38Z","references":["https://osv.dev/vulnerability/GHSA-5pq5-9phv-q5j3","https://nvd.nist.gov/vuln/detail/CVE-2020-8819","https://github.com/cardgate/woocommerce/issues/18","https://github.com/cardgate/woocommerce/pull/17/commits/0b83588d604c8c56c7fded43144fcced96b2ada9","https://github.com/cardgate/woocommerce","https://github.com/cardgate/woocommerce/blob/f2111af7b1a3fd701c1c5916137f3ac09482feeb/cardgate/cardgate.php#L426-L442","https://wpvulndb.com/vulnerabilities/10097","https://www.exploit-db.com/exploits/48134","http://packetstormsecurity.com/files/156504/WordPress-WooCommerce-CardGate-Payment-Gateway-3.1.15-Bypass.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-5pq5-9phv-q5j3","url":"https://osv.dev/vulnerability/GHSA-5pq5-9phv-q5j3"}],"summary":"CardGate Payments plugin for WooCommerce does not validate request origin"}