CVE-2025-15512 | Aplazo Payment Gateway Plugin up to 1.4.2 on WordPress Order Status check_success_response authorization

January 13, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Aplazo Payment Gateway Plugin up to 1.4.2 on WordPress. Impacted is the function check_success_response of the component Order Status Handler. This manipulation causes missing authorization.

This vulnerability appears as CVE-2025-15512. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More