Secure Card Gateway For Epay Paycenter Piraeus Bank
Monthly
Broken access control in the Secure Card Gateway for ePay Paycenter WordPress plugin (versions ≤ 1.0.32) enables remote unauthenticated attackers to bypass authorization checks and invoke privileged plugin operations without supplying any credential. Reported by Patchstack and classified as CWE-862 (Missing Authorization), the flaw carries a CVSS 3.1 score of 6.5 with a fully network-accessible, zero-privilege, zero-interaction attack vector. No active exploitation has been confirmed - this CVE does not appear in the CISA KEV catalog - and no public proof-of-concept code has been identified at time of analysis.
Broken access control in the Secure Card Gateway for ePay Paycenter WordPress plugin (versions ≤ 1.0.32) enables remote unauthenticated attackers to bypass authorization checks and invoke privileged plugin operations without supplying any credential. Reported by Patchstack and classified as CWE-862 (Missing Authorization), the flaw carries a CVSS 3.1 score of 6.5 with a fully network-accessible, zero-privilege, zero-interaction attack vector. No active exploitation has been confirmed - this CVE does not appear in the CISA KEV catalog - and no public proof-of-concept code has been identified at time of analysis.