Skip to content
OpenAdvisories

Vendor

enartia

2 known vulnerabilities.

Products

Piraeus Bank WooCommerce Payment Gateway 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14460

    Piraeus Bank WooCommerce Payment Gateway <= 3.1.4 - Missing Authorization to Unauthenticated Arbitrary Order Status Change

    The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized order status modification in all versions up to, and including, 3.1.4. This is due to missing authorization checks on the payment callback endpoint handler when pr…

    enartia Piraeus Bank WooCommerce Payment Gateway Web / CMS