CVE-2025-14880 | Netcash WooCommerce Payment Gateway Plugin up to 4.1.3 on WordPress Order Status handle_return_url authorization

January 13, 2026 Yanac

A vulnerability was found in Netcash WooCommerce Payment Gateway Plugin up to 4.1.3 on WordPress and classified as problematic. This affects the function handle_return_url of the component Order Status Handler. Executing a manipulation can lead to missing authorization.

This vulnerability is handled as CVE-2025-14880. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More