CyberRota Analysis
AI-GeneratedThe Nexi XPay Build WordPress plugin versions 7.6.1 to 7.6.2 is vulnerable due to inadequate verification of payment tokens, enabling unauthenticated attackers to access and retrieve stored card token references belonging to other users along with valid authorization signatures. This could lead to unauthorized transactions or data exposure, making it critical for WordPress site administrators using this plugin to prioritize updates to mitigate potential risks.
Original NVD Description
The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested belongs to the current user, allowing unauthenticated attackers to retrieve other customers' stored card token references together with a valid authorisation signature.