WooCommerce zipMoney Plugin Unauthenticated Option Deletion

The zipMoney Payments Plugin for WooCommerce WordPress plugin before 2.4.0 has a critical security vulnerability.

WooCommerce plugin users are at risk as the plugin does not perform authorisation checks on one of its front-end request handlers, allowing unauthenticated users to delete arbitrary WordPress options.

This can lead to the destruction of site and access control configuration, deactivation of the plugin, and potentially take the site offline.