Skip to content
OpenAdvisories

Vendor

bsecuretech

1 known vulnerabilities.

Products

bSecure – Your Universal Checkout 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6187

    bSecure 1.3.7 - 1.7.9 - Missing Authorization to Unauthenticated Privilege Escalation via order_info REST Endpoint

    The bSecure plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its order_info REST endpoint in versions 1.3.7 through 1.7.9. The plugin registers the /webhook/v2/order_info/ route with a permission_callback that alw…

    bsecuretech bSecure – Your Universal Checkout Web / CMS