Access violation vulnerability in bSecure – Your Universal Checkout 1.7.9

A security issue has been found in the bSecure plugin for WordPress. This issue allows attackers to gain more permissions than they should have, which is known as Privilege Escalation. This happens because the plugin does not properly check for authorization when using the order_info feature. This means that anyone who knows a user’s email address can access their account without needing a password.