Skip to content
OpenAdvisories

Vendor

cartasi

1 known vulnerabilities.

Products

Nexi XPay 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-15565

    Nexi XPay <= 8.3.0 - Missing Authorization to Unauthenticated Order Status Modification

    The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the redirect function in all versions up to, and including, 8.3.0. This makes it possible for unauthenticated attackers to mark pendin…

    cartasi Nexi XPay Web / CMS