Input validation vulnerability in Gestpay for WooCommerce 20221130

A popular plugin for WordPress, called Gestpay for WooCommerce, has a security issue that can be exploited by hackers. This issue affects all versions of the plugin up to and including the latest version as of November 30, 2022. The problem is related to a function called ‘ajax_unset_default_card’ and the lack of proper security checks. This means that attackers who are not logged in can trick a website administrator into clicking on a malicious link, which would allow them to remove the default status of a card token for a user.