Vulnerabilities and security researches forwoo-altcoin-payment-gateway woo-altcoin-payment-gateway
Direction: descendingMar 27, 2025
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop # CVE-2025-26541
- CVE, Research URL
- Home page URL
- Date
- Mar 26, 2025
- Research Description
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeSolz Bitcoin / AltCoin Payment Gateway for WooCommerce allows Reflected XSS. This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a through 1.7.6.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable
Mar 05, 2025
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop # CVE-2025-26535
- CVE, Research URL
- Home page URL
- Date
- Mar 03, 2025
- Research Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Bitcoin / AltCoin Payment Gateway for WooCommerce allows Blind SQL Injection. This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a through 1.7.6.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable
Jun 07, 2024
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop # CVE-2021-24679
- CVE, Research URL
- Home page URL
- Date
- Oct 04, 2021
- Research Description
- The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
- Affected versions
-
Min -, max -.
- Status
-
vulnerable
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop # CVE-2022-4118
- CVE, Research URL
- Home page URL
- Date
- May 08, 2023
- Research Description
- The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users
- Affected versions
-
Min -, max -.
- Status
-
vulnerable