zarinpal

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

zarinpal records in CISA KEV

No zarinpal vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-02214 CVE-2026-2592 · GHSA-vpw9-rw58-f7gh

Zarinpal Gateway for WooCommerce <= 5.0.16 - Improper Access Control to Payment Status Update

LOW 36

The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control to Payment Status Update in all versions up to and including 5.0.16.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00337 Published 2026-02-17 No fix listed CWE-284

TI-2026-46630 CVE-2026-65460 · GHSA-h2r3-xx3r-xgf7

WordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00142 Published 2026-07-23 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0