Authenticated Order Receipt Access in Classified Listing WordPress Plugin

Executive Summary

This vulnerability is an Insecure Direct Object Reference (IDOR) in the Classified Listing WordPress plugin before version 5.3.9. It allows authenticated users with subscriber-level access to read payment receipt details of any other user's order without proper verification.

Useful 0 Not Useful 0

Detection Guidance

Check if the Classified Listing plugin version is below 5.3.9. Inspect network traffic for requests to the payment-receipt handler with non-matching order IDs. Look for exposed payment receipt details in responses.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to view sensitive payment information of other users, including plan names, pricing, duration, amounts, currency, and receipt URLs. This could lead to financial data exposure or privacy breaches for affected users.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate GDPR by exposing personal and financial data without consent. For HIPAA, if payment receipts contain protected health information, it may breach compliance. Organizations using this plugin must address it to avoid regulatory penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Classified Listing plugin to version 5.3.9 or later immediately. Review user permissions to ensure only authorized users can access sensitive data. Monitor for unusual activity in payment receipt requests.

Useful 0 Not Useful 0