Input validation vulnerability in Gestpay for WooCommerce 20221130

The Gestpay for WooCommerce plugin, used on WordPress websites, has a security vulnerability in all versions up to November 30, 2022. This is because the plugin does not properly check for a security code called a “nonce” when using the ‘ajax_set_default_card’ function. This means that someone who is not logged in can trick a website administrator into changing a user’s default payment method by sending a fake request, such as through a fake link.