Revolut Gateway for WooCommerce <= 4.22.12 - Unauthenticated Payment Amount Validation Bypass via Currency Mismatch
- ID
- WPSEC-2026-3129
- Plugin
- Revolut Gateway for WooCommerce (revolut-gateway-for-woocommerce)
- Affected
- all versions before 4.22.13
- Remediation
- Update to 4.22.13 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weakness
- CWE-345
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-11-14
- Attack surface
- Revolut Gateway for WooCommerce on WPSec AttackSurface
- Fix released
- Published
Description
The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to a payment validation bypass via the order total verification in all versions up to, and including, 4.22.12, due to the verify_order_total() check accepting a Revolut payment whose currency differs from the WooCommerce order currency whenever the two amounts, in minor units, are within the small rounding tolerance. This makes it possible for unauthenticated attackers placing an order to have it marked as paid with a payment in a lower-valued currency. This requires the store to let customers switch the checkout currency, for example through a multi-currency plugin.
References
- https://wpsec.com/vuln/WPSEC-2026-3129/
- https://plugins.svn.wordpress.org/revolut-gateway-for-woocommerce/tags/4.22.13/
- https://wordpress.org/plugins/revolut-gateway-for-woocommerce/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS