What’s Vulnerable › Products

corvusinfo CorvusPay WooCommerce Payment Gateway vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your corvusinfo CorvusPay WooCommerce Payment Gateway version is affected

Latest corvusinfo CorvusPay WooCommerce Payment Gateway vulnerabilities

• CVE-2026-6939 — CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Stored Cross-Site Scripting via 'approval_code' Parameter (CVSS 7.2)
• CVE-2026-9028 — CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Missing Authorization to Unauthenticated Arbitrary Order Cancellation via 'order_number' Parameter (CVSS 5.3)
• CVE-2026-9027 — CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Improper Verification of Cryptographic Signature to Payment Bypass via /wp-json/corvuspay/success/ REST Endpoint (CVSS 5.3)