Piraeus Bank Woocommerce Payment Gateway
Monthly
Broken authentication in the Piraeus Bank WooCommerce Payment Gateway WordPress plugin version 3.2.0 allows unauthenticated remote attackers to bypass authentication controls, resulting in low-severity integrity and availability impacts. Reported by Patchstack and tracked under ENISA EUVD-2026-60804, this CWE-288 flaw enables access via an alternate path or channel without requiring any credentials or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis.
The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'MerchantReference' parameter in all versions up to, and including, 1.6.5.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Broken authentication in the Piraeus Bank WooCommerce Payment Gateway WordPress plugin version 3.2.0 allows unauthenticated remote attackers to bypass authentication controls, resulting in low-severity integrity and availability impacts. Reported by Patchstack and tracked under ENISA EUVD-2026-60804, this CWE-288 flaw enables access via an alternate path or channel without requiring any credentials or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis.
The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'MerchantReference' parameter in all versions up to, and including, 1.6.5.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.