Wc Peach Payments Gateway Vulnerabilities

The Peach Payments Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 4.0.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 4.0.2

Fixed in:

4.0.3

Disclosed:

Jul 8, 2026

CVE-2026-57408 on NVD →

[en] Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Peach Payments Gateway: from n/a through <= 3.3.6.

Affected:

up to 3.3.6

Fix:

No patched version reported

Disclosed:

Jan 22, 2026

CVE-2025-67942 on NVD →

The Peach Payments Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.3.6. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 3.3.6

Fixed in:

3.3.7

Disclosed:

Jan 16, 2026

CVE-2025-67942 on NVD →

[en] Missing Authorization vulnerability in Peach Payments Peach Payments Gateway.This issue affects Peach Payments Gateway: from n/a through 3.1.9.

Affected:

up to 3.2.0

Fixed in:

3.2.0

Disclosed:

Mar 21, 2024

CVE-2024-25922 on NVD →

The Peach Payments Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the peach_core_version_rollback() function in versions up to, and including, 3.1.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to rollb...

CVSS:

4.3

Affected:

up to 3.1.9

Fixed in:

3.2.0

Disclosed:

Feb 14, 2024

CVE-2024-25922 on NVD →