Cecabank WooCommerce Plugin
Cecabank WooCommerce Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Cecabank WooCommerce Plugin has a vendor fix available, so running the current release closes it.
All of these findings were reported by Bao - BlueRock. Cecabank WooCommerce Plugin is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-58685Cecabank WooCommerce Plugin <= 0.3.4 - Missing Authorization
Read the full analysisVulnerability Records
Cecabank WooCommerce Plugin
Author
cecabank
The Cecabank plugin for WooCommerce lets you charge your customers through the Cecabank virtual POS (TPV). At checkout the customer is redirected to the Cecabank payment page to enter their card details, and the order is updated automatically once Cecabank confirms the payment. It supports full and partial refunds from the WooCommerce order screen, subscriptions through WooCommerce Subscriptions and the block-based checkout. More information For more information on how to install and configure this plugin, see the plugin manual in the “Help and Resources” section of the Cecabank console.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C