High · 7.5 CVE-2026-34891 EUVD-2026-36918GHSA-x4qm-q8p4-wm7w

WordPress IDPay Payment Gateway for Woocommerce plugin <= 2.2.5 - Sensitive Data Exposure vulnerability

Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Vendor: IDPay Product: IDPay Payment Gateway for Woocommerce Category: Web / CMS

Description

Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions.

Affected products

Vendor	Product	Affected	Fixed
IDPay	IDPay Payment Gateway for Woocommerce	≤ 2.2.5	—

References

https://patchstack.com/database/wordpress/plugin/woo-idpay-gateway/vulnerability/wordpress-idpay-payment-gateway-for-woocommerce-plugin-2-2-5-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry