Corvusinfo Corvuspay Woocommerce Payment Gateway
3 CVEs affecting Corvusinfo Corvuspay Woocommerce Payment Gateway. Latest disclosed: 2026-07-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6939 | High | 7.2 | 2026-07-11 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approval_code' parameter in all versions u… |
CVE-2026-9028 | Medium | 5.3 | 2026-07-09 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.4. This is due t… |
CVE-2026-9027 | Medium | 5.3 | 2026-07-09 | The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Payment Bypass via Improper Verification of Cryptographic Signature in all vers… |