High · 8.2 CVE-2025-32119 EUVD-2025-10476GHSA-hchj-r5q6-j5p3

WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability

Published Apr 10, 2025 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: CardGate Product: CardGate Payments for WooCommerce Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CardGate CardGate Payments for WooCommerce cardgate allows Blind SQL Injection.This issue affects CardGate Payments for WooCommerce: from n/a through <= 3.2.1.

Affected products

Vendor	Product	Affected	Fixed
CardGate	CardGate Payments for WooCommerce	≤ 3.2.1	—

References

https://patchstack.com/database/Wordpress/Plugin/cardgate/vulnerability/wordpress-cardgate-payments-for-woocommerce-plugin-3-2-1-sql-injection-vulnerability?_s_id=cve vdb-entry