rupantorpay

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

rupantorpay records in CISA KEV

No rupantorpay vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-14150 CVE-2025-15511 · GHSA-v47p-p4r6-wcwj

Rupantorpay <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification

LOW 30

The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_webhook() function in all versions up to, and including, 2.0.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00244 Published 2026-01-28 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0