corvusinfo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

corvusinfo records in CISA KEV

No corvusinfo vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-06078 CVE-2026-6939 · GHSA-3qh5-q7jr-f3w8

Cross-site scripting in corvusinfo CorvusPay WooCommerce Payment Gateway

LOW 38

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approval_code' parameter in all versions up to, and including, 2.7.4 due to insufficient input sanitiza…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00562 Published 2026-07-11 No fix listed CWE-79

TI-2026-07935 CVE-2026-9028 · GHSA-pqfh-v7pq-gjhm

Missing authorization in corvusinfo CorvusPay WooCommerce Payment Gateway

LOW 31

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00474 Published 2026-07-09 No fix listed CWE-862

TI-2026-07934 CVE-2026-9027 · GHSA-g5m6-f674-9758

Improper signature verification in corvusinfo CorvusPay WooCommerce Payment Gateway

LOW 30

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Payment Bypass via Improper Verification of Cryptographic Signature in all versions up to, and including, 2.7.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00366 Published 2026-07-09 No fix listed CWE-347

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0