plugin

Float Gateway Vulnerabilities

1 known security issue reported for the Float Gateway WordPress plugin. Most recent disclosed Jan 13, 2026.

1 medium

Running Float Gateway on your site? Check whether your installed version is affected.

Float Payment Gateway <= 1.1.9 - Improper Authorization to Unauthenticated Order Status Manipulation

medium

The Float Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to improper error handling in the verifyFloatResponse() function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to mark any WooCommerce order as failed.

CVSS:: 5.3
Affected:: up to 1.1.9
Fixed in:: 1.1.10
Disclosed:: Jan 13, 2026

CVE-2025-15513 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database