vulnerability
WordPress Plugin: triplea-cryptocurrency-payment-gateway-for-woocommerce: CVE-2025-12392: Missing Authorization
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Nov 17, 2025 | Feb 4, 2026 | Feb 4, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Nov 17, 2025
Added
Feb 4, 2026
Modified
Feb 4, 2026
Description
The Cryptocurrency Payment Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_optin_optout' function in all versions up to, and including, 2.0.25. This makes it possible for unauthenticated attackers to opt in and out of tracking.
Solution
triplea-cryptocurrency-payment-gateway-for-woocommerce-plugin-cve-2025-12392
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.