Some additional information is provided here with youtube breakdown and firewall patch example: https://bitfire.co/vulnerabilities/woocommerce-payments-plugin-hacked-exploiting-critical-authentication-bypass