Filtered by vendor Payhere
Subscriptions
Filtered by product Payment Gateway Plugin For Woocommerce
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-15475 | 2 Payhere, Wordpress | 2 Payment Gateway Plugin For Woocommerce, Wordpress | 2026-01-15 | 5.3 Medium |
| The PayHere Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improper validation logic in the check_payhere_response function in all versions up to, and including, 2.3.9. This makes it possible for unauthenticated attackers to change the status of pending WooCommerce orders to paid/completed/on hold. | ||||
Page 1 of 1.