CVE-2025-15475 | PayHere Payment Gateway Plugin for WooCommerce Plugin Order Status check_payhere_response authorization

January 13, 2026 Yanac

A vulnerability marked as problematic has been reported in PayHere Payment Gateway Plugin for WooCommerce Plugin up to 2.3.9 on WordPress. This issue affects the function check_payhere_response of the component Order Status Handler. The manipulation leads to missing authorization.

This vulnerability is listed as CVE-2025-15475. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More