Vulnerabilities

TI-2026-06078 CVE-2026-6939 · GHSA-3qh5-q7jr-f3w8

Cross-site scripting in corvusinfo CorvusPay WooCommerce Payment Gateway

LOW 38

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'approval_code' parameter in all versions up to, and including, 2.7.4 due to insufficient input sanitiza…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00562 Published 2026-07-11 No fix listed CWE-79

TI-2026-07935 CVE-2026-9028 · GHSA-pqfh-v7pq-gjhm

Missing authorization in corvusinfo CorvusPay WooCommerce Payment Gateway

LOW 31

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00474 Published 2026-07-09 No fix listed CWE-862

TI-2026-07934 CVE-2026-9027 · GHSA-g5m6-f674-9758

Improper signature verification in corvusinfo CorvusPay WooCommerce Payment Gateway

LOW 30

The CorvusPay WooCommerce Payment Gateway plugin for WordPress is vulnerable to Payment Bypass via Improper Verification of Cryptographic Signature in all versions up to, and including, 2.7.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00366 Published 2026-07-09 No fix listed CWE-347

Vulnerabilities

Filters

Cross-site scripting in corvusinfo CorvusPay WooCommerce Payment Gateway

Missing authorization in corvusinfo CorvusPay WooCommerce Payment Gateway

Improper signature verification in corvusinfo CorvusPay WooCommerce Payment Gateway