CVE-2025-15513 in Float Payment Gateway Plugininformation

Résumé

par MITRE • 14/01/2026

The Float Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to improper error handling in the verifyFloatResponse() function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to mark any WooCommerce order as failed.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Divulgation

14/01/2026

Modérer

accepté

Entrée

VDB-340881

CPE

prêt

CWE

CWE-287 (confirmé)

CVSS

5.3 (VulDB)

EPSS

0.00227

KEV

non

Activités

très faible

Secteur

Hostingprovider

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-15513
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-15513
CVE Details	https://www.cvedetails.com/cve/CVE-2025-15513/

◂ Précédent Aperçu Suivant ▸

Want to know what is going to be exploited?

We predict KEV entries!