aplazopayment

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

aplazopayment records in CISA KEV

No aplazopayment vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-14151 CVE-2025-15512 · GHSA-8v46-f2rh-pfmp

Aplazo Payment Gateway <= 1.4.3 - Missing Authorization to Unauthenticated Order Status Manipulation

LOW 30

The Aplazo Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the check_success_response() function in all versions up to, and including, 1.4.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0027 Published 2026-01-14 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0