vulnerability

WordPress Plugin: woocommerce-gateway-nab-dp: CVE-2020-11497: Protection Mechanism Failure

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Aug 20, 2020

Added

May 15, 2025

Modified

Apr 30, 2026

Description

An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by assigning an arbitrary bank transaction ID during the payment-details entry step.

Solution

woocommerce-gateway-nab-dp-plugin-cve-2020-11497

References

https://www.cve.org/CVERecord?id=CVE-2020-11497
https://www.wordfence.com/threat-intel/vulnerabilities/id/1dccdbbd-fd3c-4d76-a05a-42f1c7f7132f?source=api-prod
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-3850
CVE-2020-11497
https://attackerkb.com/topics/CVE-2020-11497
CWE-354
EUVD-EUVD-2020-3850

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report