Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/11/05 5:8 a.m.3 views

CVE-2025-11890

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS6AI score0.00131EPSS
Exploits0References1
NVD
NVD
added 2025/11/04 5:16 a.m.7 views

CVE-2025-11890

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS0.00131EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/11/04 5:16 a.m.4 views

WordPress Crypto Payment Gateway with Payeer for WooCommerce plugin <= 1.0.3 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Crypto Payment Gateway with Payeer for WooCommerce versions = 1.0.3...

7.5CVSS6.7AI score0.00131EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/04 4:27 a.m.6 views

CVE-2025-11890 Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS0.00131EPSS
Exploits0References2
CVE
CVE
added 2025/11/04 4:27 a.m.15 views

CVE-2025-11890

CVE-2025-11890 : The Crypto Payment Gateway with Payeer for WooCommerce WordPress plugin is vulnerable to an unauthenticated payment bypass in all versions up to 1.0.3. The flaw stems from improper server-side verification of payment status via the /wc-api/bp-payeer-gateway-callback endpoint, all...

7.5CVSS5.7AI score0.00131EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/04 4:27 a.m.3 views

CVE-2025-11890 Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS5.6AI score0.00131EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.6 views

PT-2025-44941

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS6AI score0.00131EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.2 views

WordPress plugin Crypto Payment Gateway with Payeer for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.6AI score0.00131EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-31593

Malicious code in bioql PyPI...

6CVSS6.6AI score0.0003EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/09/30 6:41 p.m.10 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS6.7AI score0.0003EPSS
Exploits0References1
NVD
NVD
added 2025/09/29 6:15 p.m.3 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS0.0003EPSS
Exploits0References4
CVE
CVE
added 2025/09/29 12:0 a.m.9 views

CVE-2025-57197

The CVE-2025-57197 entry applies to the Payeer Android application version 2.5.0, where an improper access control in the PIN-change authentication flow allows a local attacker with root access to bypass the current PIN verification and directly modify the authentication PIN. This means an attack...

6CVSS6.3AI score0.0003EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/09/29 12:0 a.m.3 views

Payeer Application 安全漏洞

Payeer Application is a cryptocurrency application from Payeer, Inc. A security vulnerability exists in Payeer Application version 2.5.0 that stems from improper access control in the authentication process, which could allow a local attacker to bypass the current PIN verification and directly...

6CVSS6.6AI score0.0003EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/29 12:0 a.m.1 views

PT-2025-39852

Name of the Vulnerable Software and Affected Versions Payeer Android application version 2.5.0 Description An improper access control issue exists in the authentication process for changing the PIN in the Payeer Android application. A local attacker with root access to the device can bypass the P...

6CVSS6.3AI score0.0003EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/09/29 12:0 a.m.6 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

0.0003EPSS
Exploits0References4
Rows per page
Query Builder