Revolut Gateway For Woocommerce Vulnerabilities

The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to 4.22.10. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 4.22.10

Fixed in:

4.22.10

Disclosed:

Aug 12, 2026

CVE-2026-73353 on NVD →

The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wc/v3/revolut REST API endpoint in all versions up to, and including, 4.17.3. This makes it possible for unauthenticated attackers to mark orders as completed.

CVSS:

5.3

Affected:

up to 4.17.3

Fixed in:

4.17.4

Disclosed:

Sep 24, 2024

CVE-2024-8678 on NVD →

The Revolut Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the wc_revolut_clear_records and wc_revolut_onboard_applepay_domain functions in versions up to, and including, 4.9.7. This makes it possible for authenticated attackers, with...

CVSS:

5.4

Affected:

up to 4.9.7

Fixed in:

4.9.8

Disclosed:

Jan 8, 2024

CVE-2023-52224 on NVD →