Skip to content
OpenAdvisories

Vendor

Alma

2 known vulnerabilities.

Products

Alma – Pay in installments or later for WooCommerce 1 Alma 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-24999

    WordPress Alma plugin <= 5.16.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Alma: from n/a through <= 5.16.1.

    Alma Alma
  • Medium 6.5
    CVE-2023-50369

    WordPress Alma – Pay in installments or later for WooCommerce Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alma Alma – Pay in installments or later for WooCommerce allows Stored XSS.This issue affects Alma – Pay in installments or later for WooCommerce: from n/a t…

    Alma Alma – Pay in installments or later for WooCommerce Web / CMS