Zarinpal Gateway vulnerabilities
1 known vulnerability in Zarinpal Gateway from Zarinpal. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest first
- 7.7 High severity
Zarinpal Gateway: Improper Access Control
The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control to Payment Status Update in all versions up to and including 5.0.16. This is due to the payment callback handler 'Return_from_ZarinPal_Gateway' failing to valida