Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-57976 EUVD-2025-30646GHSA-gx4j-35mr-rr8x

WordPress CardCom Payment Gateway plugin <= 3.5.0.7 - Broken Access Control vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CardCom Payment Gateway: from n/a through <= 3.5.0.7.

Affected products

VendorProductAffectedFixed
CardCom CardCom Payment Gateway ≤ 3.5.0.7 —

References