Vulnerabilities / Checkout.com Payment Gateway
Checkout.com Payment Gateway vulnerabilities
Advisories WPSec published for Checkout.com Payment Gateway. Other sources may list more. Its attack surface: Checkout.com Payment Gateway on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-05 | WPSEC-2026-2560 | Checkout.com Payment Gateway <= 5.1.4.4 - Unauthenticated Webhook Signature Forgery | Medium 5.9 | 5.1.5 |
| 2026-11-05 | WPSEC-2026-2559 | Checkout.com Payment Gateway <= 5.1.4.4 - Unauthenticated Path Traversal to Sensitive Information Exposure via 'paymentId' Parameter | High 7.5 | 5.1.5 |
| 2026-11-05 | WPSEC-2026-2558 | Checkout.com Payment Gateway <= 5.1.4.4 - Unauthenticated Insecure Direct Object Reference to Order Status Modification via 3DS Return Handler | Medium 5.3 | 5.1.5 |
| 2026-11-05 | WPSEC-2026-2557 | Checkout.com Payment Gateway <= 5.1.4.4 - Unauthenticated Insecure Direct Object Reference via Saved Payment Token | High 7.5 | 5.1.5 |
| 2026-11-05 | WPSEC-2026-2556 | Checkout.com Payment Gateway <= 5.1.4.4 - Unauthenticated Payment Verification Bypass via Flow Checkout | High 7.5 | 5.1.5 |
License: CC BY 4.0