CVE-2025-15400

The OpenPix for WooCommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capability or nonce checks. This permits any authenticated users, such as subscribers to clear API credentials and webhook...

CVE-2025-15400

The OpenPix for WooCommerce WordPress plugin, in versions through 2.13.3 , is vulnerable to a security flaw where authenticated users can trigger AJAX actions to reset payment gateway configuration options. The root cause is a missing capability and nonce check , allowing any authenticated user—i...

WordPress plugin Pix for Woocommerce has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...