CVE-2025-62870

MediumCVSS 5.3

Published: 09/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The Eupago Gateway For Woocommerce plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 4.7.1.

Risk Assessment

An attacker may gain access to payment gateway settings without permissions, potentially leading to unauthorized payment operations or transaction security compromise.

Recommendation

Update the Eupago Gateway For Woocommerce plugin to the latest version that includes the security fix.

Other vulnerabilities in Eupago Gateway For Woocommerce

CVE-2026-7862High
The Eupago Gateway plugin for WooCommerce before version 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to initiate refunds against any WooCommerce order using the merchant's payment gateway credentials.

Original NVD description (English source)

Missing Authorization vulnerability in Eupago Eupago Gateway For Woocommerce eupago-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eupago Gateway For Woocommerce: from n/a through <= 4.7.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS