PT-2026-2840 · WordPress · Float Payment Gateway
CVE-2025-15513
·
Publicado
2026-01-14
·
Atualizado
2026-01-14
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Float Payment Gateway plugin for WordPress versions up to and including 1.1.9
Description
The Float Payment Gateway plugin for WordPress is susceptible to unauthorized data modification because of inadequate error handling within the
verifyFloatResponse() function. This flaw allows unauthenticated attackers to change the status of any WooCommerce order to 'failed'.Recommendations
Update the Float Payment Gateway plugin to a version newer than 1.1.9.
Correção
Incorrect Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Float Payment Gateway