Woo Altcoin Payment Gateway Vulnerabilities

The Bitcoin / AltCoin Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.7.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha...

CVSS:

6.1

Affected:

up to 1.7.6

Fix:

No patched version reported

Disclosed:

Mar 20, 2025

CVE-2025-26541 on NVD →

The Bitcoin / AltCoin Payment Gateway for WooCommerce plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.7.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attacker...

CVSS:

7.5

Affected:

up to 1.7.6

Fix:

No patched version reported

Disclosed:

Mar 1, 2025

CVE-2025-26535 on NVD →

The Bitcoin / AltCoin Payment Gateway for WooCommerce plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for administrator-level atta...

CVSS:

9.8

Affected:

up to 1.7.2

Fixed in:

1.7.3

Disclosed:

Apr 17, 2023

CVE-2022-4118 on NVD →

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue

CVSS:

6.1

Affected:

up to 1.6.0

Fixed in:

1.6.1

Disclosed:

Sep 6, 2021

CVE-2021-24679 on NVD →