Input validation vulnerability in Gestpay for WooCommerce 20221130

The Gestpay for WooCommerce plugin, which is used on WordPress websites, has a security issue. This issue, known as Cross-Site Request Forgery, exists in all versions of the plugin up to and including 20221130. This is because the plugin does not properly check for a security code called a nonce on the ‘ajax_delete_card’ function. This means that someone without proper authorization can delete a user’s default card token by tricking a site administrator into clicking on a link.