CyberRota Analysis
AI-GeneratedThe Persian Elementor WordPress plugin versions prior to 2.8.2 are vulnerable due to inadequate verification of payment authorities during ZarinPal payment callbacks, enabling attackers to exploit this flaw and complete unauthorized transactions. This could lead to financial losses and compromised order integrity. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential risks.
Original NVD Description
The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction being completed, allowing unauthenticated attackers to complete a pending order using a valid payment authority obtained from a different transaction.