Product
An unauthenticated settings change vulnerability in the PGALL for WooCommerce plugin allows attackers to manipulate payment gateway configurations via AJAX by harvesting nonces from public checkout pages.