Vulnerabilities and security researches forreepay-checkout-gateway reepay-checkout-gateway

Sep 05, 2025

CVE, Research URL: CVE-2025-58616
Home page URL: Security reports for Official Billwerk+ Payments Gateway
Application: Official Billwerk+ Payments Gateway
Date: Sep 03, 2025
Research Description: Missing Authorization vulnerability in Frisbii Frisbii Pay reepay-checkout-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frisbii Pay: from n/a through <= 1.8.2.1.
Affected versions: max 1.8.3.
Status: vulnerable

Jun 29, 2026

CVE, Research URL: CVE-2026-56038
Home page URL: Security reports for Official Billwerk+ Payments Gateway
Application: Official Billwerk+ Payments Gateway
Date: Jun 26, 2026
Research Description: Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.
Affected versions: max 1.8.2.1.
Status: vulnerable

CVE, Research URL: CVE-2026-3462
Home page URL: Security reports for Official Billwerk+ Payments Gateway
Application: Official Billwerk+ Payments Gateway
Date: Jun 27, 2026
Research Description: The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'upload_csv' and 'process_batch' functions in all versions up to, and including, 1.8.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary CSV data and overwrite WooCommerce payment tokens, postmeta, and order meta records.
Affected versions: max 1.8.10.
Status: vulnerable