Skip to content
OpenAdvisories

Vendor

bigmaster

1 known vulnerabilities.

Products

Payaza 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12355

    Payaza <= 0.3.8 - Missing Authorization to Unauthenticated Order Status Update

    The Payaza plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_update_order_status' AJAX endpoint in all versions up to, and including, 0.3.8. This makes it possible for unauthentica…

    bigmaster Payaza Web / CMS