cleantalk
Vulnerabilities and Security Researches

Vulnerabilities and security researches forwoo-altcoin-payment-gateway woo-altcoin-payment-gateway

Direction: descending
Mar 27, 2025

Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop # CVE-2025-26541

CVE, Research URL

CVE-2025-26541

Date
Mar 26, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeSolz Bitcoin / AltCoin Payment Gateway for WooCommerce allows Reflected XSS. This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a through 1.7.6.
Affected versions
Min -, max -.
Status
vulnerable
Mar 05, 2025

Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop # CVE-2025-26535

CVE, Research URL

CVE-2025-26535

Date
Mar 03, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Bitcoin / AltCoin Payment Gateway for WooCommerce allows Blind SQL Injection. This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a through 1.7.6.
Affected versions
Min -, max -.
Status
vulnerable
Jun 07, 2024

Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop # CVE-2021-24679

CVE, Research URL

CVE-2021-24679

Date
Oct 04, 2021
Research Description
The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
Affected versions
Min -, max -.
Status
vulnerable

Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop # CVE-2022-4118

CVE, Research URL

CVE-2022-4118

Date
May 08, 2023
Research Description
The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users
Affected versions
Min -, max -.
Status
vulnerable