Mycryptocheckout Vulnerabilities

The MyCryptoCheckout – Bitcoin, Ethereum, and 100+ altcoins for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.161. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.161

Fixed in:

2.162

Disclosed:

May 12, 2026

CVE-2026-45209 on NVD →

The MyCryptoCheckout plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.125. This is due to missing nonce validation in the ~/vendor/plainview/sdk/wordpress/form2/form.php file. This makes it possible for unauthenticated attackers to perform unauthorized actions via a f...

CVSS:

4.3

Affected:

up to 2.125

Fixed in:

2.126

Disclosed:

Sep 4, 2023

CVE-2023-41693 on NVD →

The MyCryptoCheckout plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘url' parameter in versions up to, and including, 2.123 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...

CVSS:

6.1

Affected:

up to 2.123

Fixed in:

2.124

Disclosed:

Apr 6, 2023

CVE-2023-1546 on NVD →