ABA PayWay Payment Gateway for WooCommerce
ABA PayWay Payment Gateway for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for ABA PayWay Payment Gateway for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by João Pedro Soares de Alcântara. ABA PayWay Payment Gateway for WooCommerce is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-32586ABA PayWay Payment Gateway for WooCommerce <= 2.1.4 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

ABA PayWay Payment Gateway for WooCommerce
Author
ABA Bank
PayWay is Cambodia’s leading online payment gateway provided by Advanced Bank of Asia Ltd. (ABA Bank). It offers multiple way of checkout options with credit/debit cards (Visa, Mastercard, UnionPay) and ABA PAY QR code (ABA account, VISA QR, Mastercard QR) and more to come. With this plugin you can easily integrate your website with PayWay just in a few clicks. PayWay’s Feature Payment Options: PayWay accepted ABA account to account payment, Visa card, Master card, and UPI. Merchant Portals: Merchant be able to see all payment transaction which has been made from their customer and it’s detail, doing refund, customer management & invoicing tool, managing user and role, audit trail. Invoicing tool: PayWay provide invoicing tool which is available in through the merchant portal. Merchant could manage their customer information and managing invoice information. The invoicing tool is suitable for business to business and also business to individual customer. Merchant quickly create an invoice, send the invoice thought the email or any other channel by just single click to copy the link and send to their customer. User & Role: Merchant could manage the access level of each user so that they are restricted to perform only the action that they are allow. Audit trail: every actions that user perform in the system are tracked properly so merchant can always see know who made change in the system. What you can do with this plugin? Enable/disable payment options. Switching between staging environment and production environment. Payment logo size configuration to make sure it’s will fit your website. The plugin will appear on the checkout page. Why ABA PayWay Payment Gateway for WooCommerce? Is plugin is officially developed by Advanced Bank of Asia, which mean you will be the first who get an update once the gateway has new features. Saving time of integration. Rapidly put your produce/service on sales within few click. Saving cost. You don’t have to hire technical people to do the integration. With this plugin, you con just filling few fields, activate and ready to go. A brief Markdown Example Payment options: ABA PAY Mastercard/Visa/UnionPay KHQR Alipay WeChat
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C