Plugin icon

CorvusPay WooCommerce Payment Gateway

corvuspay-woocommerce-integration

Vulnerabilities:

4

Last Updated:

July 17, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-07-10
Title
CorvusPay WooCommerce Payment Gateway < 2.7.5 - Unauthenticated Stored Cross-Site Scripting via 'approval_code' Parameter
Fixed in
Fixed in 2.7.5
CVSS
7.2 (high)
Published
2026-07-08
Title
CorvusPay WooCommerce Payment Gateway < 2.7.5 - Missing Authorization to Unauthenticated Arbitrary Order Cancellation via 'order_number' Parameter
Fixed in
Fixed in 2.7.5
CVSS
5.3 (medium)
Published
2026-07-08
Title
CorvusPay WooCommerce Payment Gateway < 2.7.5 - Unauthenticated Improper Verification of Cryptographic Signature to Payment Bypass via /wp-json/corvuspay/success/ REST Endpoint
Fixed in
Fixed in 2.7.5
CVSS
5.3 (medium)
Published
2026-06-23
Title
CorvusPay WooCommerce Payment Gateway < 2.7.5 - Missing Authorization
Fixed in
Fixed in 2.7.5
CVSS
5.3 (medium)