EUVD-2026-23194

The Payment Gateway for Redsys & WooCommerce Lite plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 7.0.0 due to successfulrequest handlers calculating a local signature but not validating DsSignature from the request before...

Malware in pay-gateway

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4716 Malicious code in pay-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833ef41ae1118909a10510c9670df5ab91c285cab62449451578a869afa05aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pay-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833ef41ae1118909a10510c9670df5ab91c285cab62449451578a869afa05aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...