Cpe:2.3:a:woocommerce:paypal_pro_payment_gateway:*:*:*:*:*:*:*:*

The WooCommerce PayPal Pro Payment Gateway plugin before version 4.1.1 is vulnerable to an unauthenticated payment bypass via the pp_capture_order AJAX handler, enabling attackers to mark unpaid orders as complete.