Novalnet

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Novalnet records in CISA KEV

No Novalnet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Novalnet Payment Module Ubercart- 1 record LOW

Records

2 records

TI-2026-41501 CVE-2026-57677 · GHSA-w8wf-v3vp-wj3x

WordPress Novalnet Payment Gateway for WooCommerce plugin <= 12.10.3 - PHP Object Injection vulnerability

MEDIUM 50

Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2026-07-02 No fix listed CWE-502

TI-2015-04634 CVE-2015-5504 · GHSA-2pm5-r39v-pr4r

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal…

LOW 37

SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01977 Published 2015-08-18 No fix listed CWE-89

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0