{
 "id": "WPSEC-2026-3129",
 "url": "https://wpsec.com/vuln/WPSEC-2026-3129/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-3129/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-3129/index.md",
 "title": "Revolut Gateway for WooCommerce <= 4.22.12 - Unauthenticated Payment Amount Validation Bypass via Currency Mismatch",
 "description": "The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to a payment validation bypass via the order total verification in all versions up to, and including, 4.22.12, due to the verify_order_total() check accepting a Revolut payment whose currency differs from the WooCommerce order currency whenever the two amounts, in minor units, are within the small rounding tolerance. This makes it possible for unauthenticated attackers placing an order to have it marked as paid with a payment in a lower-valued currency. This requires the store to let customers switch the checkout currency, for example through a multi-currency plugin.",
 "plugin": {
  "slug": "revolut-gateway-for-woocommerce",
  "name": "Revolut Gateway for WooCommerce",
  "full_name": "Revolut Gateway for WooCommerce",
  "wordpress_org": "https://wordpress.org/plugins/revolut-gateway-for-woocommerce/",
  "advisories_url": "https://wpsec.com/vuln/plugin/revolut-gateway-for-woocommerce/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/revolut-gateway-for-woocommerce"
 },
 "type": "BYPASS",
 "cwe": [
  "CWE-345"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "4.22.13",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 4.22.13"
  ]
 },
 "introduced_in": null,
 "fixed_in": "4.22.13",
 "remediation": "Update to 4.22.13 or later.",
 "fix_released": "2026-11-13T08:47:05+00:00",
 "published": "2026-11-14T09:40:51+00:00",
 "updated": "2026-11-13T15:54:51.056500+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-3129/",
  "https://plugins.svn.wordpress.org/revolut-gateway-for-woocommerce/tags/4.22.13/",
  "https://wordpress.org/plugins/revolut-gateway-for-woocommerce/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/revolut-gateway-for-woocommerce",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-14"
 }
}