CVE-2025-14843: Missing Authorization

The Wizit Gateway for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Order Cancellation in all versions up to, and including, 1.3.1. This is due to a lack of authentication and authorization checks in the 'handlecheckoutredirecturlresponse' function. This makes it...

PT-2026-4571

Name of the Vulnerable Software and Affected Versions Wizit Gateway for WooCommerce versions prior to 1.3.2 Description The plugin is subject to unauthenticated arbitrary order cancellation. This issue stems from a lack of authentication and authorization checks within the handle checkout...