Vulnerabilities / Cardinity Payment Gateway for WooCommerce
Cardinity Payment Gateway for WooCommerce vulnerabilities
Advisories WPSec published for Cardinity Payment Gateway for WooCommerce. Other sources may list more. Its attack surface: Cardinity Payment Gateway for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0947 | Cardinity Payment Gateway for WooCommerce <= 3.4.1 - Missing Authorization to Unauthenticated Transaction Log Download | Medium 5.3 | 3.4.2 |
| 2026-10-14 | WPSEC-2026-0946 | Cardinity Payment Gateway for WooCommerce <= 3.4.1 - Unauthenticated Order Status Manipulation via Hosted Checkout Callbacks | High 7.5 | 3.4.2 |
License: CC BY 4.0