Wava.co

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wava.co records in CISA KEV

No Wava.co vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-28580 CVE-2026-39609 · GHSA-m24w-6jfq-fmh3

WordPress Wava Payment plugin <= 0.3.7 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Wava.co Wava Payment wava-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wava Payment: from n/a through <= 0.3.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0