Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/11/05 5:08 a.m.•15 views

CVE-2025-11890

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS6AI score0.00279EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 5:16 a.m.•24 views

CVE-2025-11890

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS0.00279EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/04 4:27 a.m.•42 views

CVE-2025-11890

CVE-2025-11890 : The Crypto Payment Gateway with Payeer for WooCommerce WordPress plugin is vulnerable to an unauthenticated payment bypass in all versions up to 1.0.3. The flaw stems from improper server-side verification of payment status via the /wc-api/bp-payeer-gateway-callback endpoint, all...

7.5CVSS5.7AI score0.00279EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/04 4:27 a.m.•7 views

CVE-2025-11890 Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS5.6AI score0.00279EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•19 views

PT-2025-44941

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS6AI score0.00279EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•1 views

CVE-2025-11890: Missing Authorization

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback...

7.5CVSS5.7AI score0.00279EPSS
SaveExploits0References1
Rows per page
Query Builder