Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CorvusPay WooCommerce Payment Gateway — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in CorvusPay WooCommerce Payment Gateway, with AI-generated Chinese analysis, references, and POCs.

Vendor: corvuspay

CVE IDTitleCVSSSeverityPublished
CVE-2026-6939 CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Stored Cross-Site Scripting via 'approval_code' Parameter CWE-79 7.2 High2026-07-11
CVE-2026-9028 CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Missing Authorization to Unauthenticated Arbitrary Order Cancellation via 'order_number' Parameter CWE-862 5.3 Medium2026-07-09
CVE-2026-9027 CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Improper Verification of Cryptographic Signature to Payment Bypass via /wp-json/corvuspay/success/ REST Endpoint CWE-347 5.3 Medium2026-07-09
CVE-2026-56029 WordPress CorvusPay WooCommerce Payment Gateway plugin <= 2.7.4 - Broken Authentication vulnerability CWE-288 7.5 High2026-06-26

All 4 known CVE vulnerabilities affecting CorvusPay WooCommerce Payment Gateway with full Chinese analysis, references, and POCs where available.