Lucene search
+L

17 matches found

RedhatCVE
RedhatCVE
•added 2025/11/05 5:08 a.m.•15 views

CVE-2025-11890

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS6AI score0.00279EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 5:16 a.m.•24 views

CVE-2025-11890

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS0.00279EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/11/04 5:16 a.m.•16 views

WordPress Crypto Payment Gateway with Payeer for WooCommerce plugin <= 1.0.3 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Crypto Payment Gateway with Payeer for WooCommerce versions = 1.0.3...

7.5CVSS6.7AI score0.00279EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/11/04 4:27 a.m.•42 views

CVE-2025-11890

CVE-2025-11890 : The Crypto Payment Gateway with Payeer for WooCommerce WordPress plugin is vulnerable to an unauthenticated payment bypass in all versions up to 1.0.3. The flaw stems from improper server-side verification of payment status via the /wc-api/bp-payeer-gateway-callback endpoint, all...

7.5CVSS5.7AI score0.00279EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/04 4:27 a.m.•31 views

CVE-2025-11890 Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS0.00279EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/04 4:27 a.m.•7 views

CVE-2025-11890 Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS5.6AI score0.00279EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•19 views

PT-2025-44941

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS6AI score0.00279EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•15 views

WordPress plugin Crypto Payment Gateway with Payeer for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS6.6AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•1 views

CVE-2025-11890: Missing Authorization

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS5.7AI score0.00279EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-31593

Malicious code in bioql PyPI...

6CVSS6.6AI score0.00169EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/09/30 6:41 p.m.•25 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS6.7AI score0.00169EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/29 6:15 p.m.•14 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS0.00169EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/09/29 12:00 a.m.•22 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

0.00169EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/29 12:00 a.m.•0 views

CVE-2025-57197: Improper Access Control

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS5.9AI score0.00169EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/29 12:00 a.m.•30 views

CVE-2025-57197

In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...

6CVSS6.3AI score0.00169EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/29 12:00 a.m.•13 views

Payeer Application 安全漏洞

Payeer Application is a cryptocurrency application from Payeer, Inc. A security vulnerability exists in Payeer Application version 2.5.0 that stems from improper access control in the authentication process, which could allow a local attacker to bypass the current PIN verification and directly...

6CVSS6.6AI score0.00169EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/29 12:00 a.m.•13 views

PT-2025-39852

Name of the Vulnerable Software and Affected Versions Payeer Android application version 2.5.0 Description An improper access control issue exists in the authentication process for changing the PIN in the Payeer Android application. A local attacker with root access to the device can bypass the P...

6CVSS6.3AI score0.00169EPSS
SaveExploits0References7
Rows per page
Query Builder