CVE-2013-1924: Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2

Security readout for executives and security teams

CVE-2013-1924 is an access bypass issue in the Drupal Commerce Skrill payment module. A site using an affected version could expose payment-related functionality in a way the module did not intend. The provided sources do not include severity scoring, exploit details, or confirmed exploitation. Exposure is limited to Drupal sites with the Commerce Skrill module installed and running a version earlier than 7.x-1.2. Organizations not using this module are not indicated as affected by the provided sources. Handle as a targeted dependency remediation item. Prioritize if the module supports live payment flows, because access bypass in payment functionality can create business and trust risk even without a published severity score. Mitigation focus: Inventory Drupal sites for the Commerce Skrill module.; Upgrade Commerce Skrill to 7.x-1.2 or a later vendor-supported release.; Review the Drupal advisory before applying production changes..

Prepared

Jun 6, 2026, 02:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.