{
 "id": "WPSEC-2026-2287",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2287/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2287/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2287/index.md",
 "title": "BitPay Checkout for WooCommerce <= 7.1.4 - Unauthenticated Insecure Direct Object Reference to BitPay Invoice Creation",
 "description": "The BitPay Checkout for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference via the order-received page in all versions up to, and including, 7.1.4, due to missing validation of the order key before a BitPay invoice is created for the order ID in the URL. The plugin only checked that the order used the BitPay payment gateway and still needed payment. This makes it possible for unauthenticated attackers who know or guess an order ID to create BitPay invoices for other customers' unpaid orders, which replaces the order's stored transaction ID and can expose the order key placed in the invoice's return URL.",
 "plugin": {
  "slug": "bitpay-checkout-for-woocommerce",
  "name": "BitPay Checkout for WooCommerce",
  "full_name": "BitPay Checkout for WooCommerce",
  "wordpress_org": "https://wordpress.org/plugins/bitpay-checkout-for-woocommerce/",
  "advisories_url": "https://wpsec.com/vuln/plugin/bitpay-checkout-for-woocommerce/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/bitpay-checkout-for-woocommerce"
 },
 "type": "IDOR",
 "cwe": [
  "CWE-639"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 6.5,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "7.1.5",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 7.1.5"
  ]
 },
 "introduced_in": null,
 "fixed_in": "7.1.5",
 "remediation": "Update to 7.1.5 or later.",
 "fix_released": "2026-10-30T18:05:02+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:23:33.374145+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2287/",
  "https://plugins.svn.wordpress.org/bitpay-checkout-for-woocommerce/tags/7.1.5/",
  "https://wordpress.org/plugins/bitpay-checkout-for-woocommerce/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/bitpay-checkout-for-woocommerce",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "None seen",
  "as_of": "2026-11-03"
 }
}