WordPress Plugin Vulnerabilities

Eupago Gateway For Woocommerce <= 4.7.2 - Missing Authorization

Description

The plugin is vulnerable to unauthorized access due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Affects Plugins

Plugin icon
eupago-gateway-for-woocommerce
Fixed in 4.7.2

References

CVE
CVE-2025-62870
URL
https://vdp.patchstack.com/database/Wordpress/Plugin/eupago-gateway-for-woocommerce/vulnerability/wordpress-eupago-gateway-for-woocommerce-plugin-4-6-3-broken-access-control-vulnerability

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
0xd4rk5id3
Verified
No
WPVDB ID
553d3039-0134-4339-8f46-d84a1cc23b04

Timeline

Publicly Published
2025-12-08 (about 9 months ago)
Added
2025-12-12 (about 9 months ago)
Last Updated
2026-07-15 (about 2 months ago)

Other

Published
Title
Published
2024-06-28
Title
WP Job Manager - Resume Manager < 2.2.0 - Missing Authorization
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure
Published
2026-01-07
Title
Dashboard Welcome for Beaver Builder <= 1.0.8 - Missing Authorization
Published
2025-04-07
Title
Motors – Car Dealership & Classified Listings Plugin < 1.4.67 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
Published
2025-06-13
Title
Premmerce User Roles < 1.0.14 - Missing Authorization