Zarinpal vulnerabilities
We track 1 vulnerability in Zarinpal products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 17, 2026.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest Zarinpal vulnerabilities
- 7.7 High severity
Zarinpal Gateway: Improper Access Control
The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control to Payment Status Update in all versions up to and including 5.0.16. This is due to the payment callback handler 'Return_from_ZarinPal_Gateway' failing to valida