WooCommerce Total Processing Plugin Path Traversal & Credential Disclosure

The Total processing card payments for WooCommerce WordPress plugin through 7.3 is affected.

Vulnerability: Unvalidated user-supplied path and lack of response authenticity verification.

Impact: Allows unauthenticated attackers to redirect payment gateway requests and forge success responses, potentially disclosing merchant's payment-gateway credentials and marking arbitrary orders as paid.