CVE-2025-11728: Missing Authentication for Critical Function

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'returnpayment' and 'noticepayment' functions in all versions up to, and including, 6.0. This makes it possibl...

PT-2025-42313

Name of the Vulnerable Software and Affected Versions Oceanpayment CreditCard Gateway plugin for WordPress versions through 6.0 Description The Oceanpayment CreditCard Gateway plugin for WordPress is susceptible to unauthorized data modification. This is due to the absence of authentication and...