CyberSecBulletin

Ipaymu vulnerabilities

We track 1 vulnerability in Ipaymu products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2026.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Ipaymu vulnerabilities

  • 8.2 High severity

    iPaymu Payment Gateway for WooCommerce: Missing Authorization

    CVE-2026-0656Ipaymu

    The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 2.0.2 via the 'check_ipaymu_response' function. This is due to the plugin not validating webhook request authenticity