Skip to content
OpenAdvisories

Vendor

zarinpal

2 known vulnerabilities.

Products

Zarinpal Gateway 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-2592

    Zarinpal Gateway for WooCommerce <= 5.0.16 - Improper Access Control to Payment Status Update

    The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control to Payment Status Update in all versions up to and including 5.0.16. This is due to the payment callback handler 'Return_from_ZarinPal_Gateway' failing to valid…

    zarinpal Zarinpal Gateway Web / CMS