Robokassa Payment Gateway For Woocommerce
Monthly
Broken access control in the Robokassa Payment Gateway for WooCommerce plugin (versions ≤1.8.9) allows unauthenticated remote attackers to invoke restricted plugin actions, resulting in limited integrity and availability impact on affected WordPress e-commerce stores. The root cause is CWE-862 (Missing Authorization): the plugin fails to perform capability checks before executing sensitive operations, as reported by Patchstack (EUVD-2026-75513). No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Broken access control in the Robokassa Payment Gateway for WooCommerce plugin (versions ≤1.8.9) allows unauthenticated remote attackers to invoke restricted plugin actions, resulting in limited integrity and availability impact on affected WordPress e-commerce stores. The root cause is CWE-862 (Missing Authorization): the plugin fails to perform capability checks before executing sensitive operations, as reported by Patchstack (EUVD-2026-75513). No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.