Duitku Payment Gateway

Duitku Payment Gateway has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include Improper Access Control.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each. Duitku Payment Gateway is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all Duitku Payment Gateway vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-32468

Duitku Payment Gateway <= 2.11.14 - Unauthenticated Information Exposure

Read the full analysis

Vulnerability Records

2 records


2026-08-18 00:00	Duitku Payment Gateway <= 2.11.14 - Unauthenticated Information Exposure Duitku Payment Gateway <= 2.11.14	`CVE-2026-32468`	5.3 Medium	daroo	No
2024-02-26 00:00	Duitku Payment Gateway <= 2.11.6 - Missing Authorization via check_duitku_response Duitku Payment Gateway <= 2.11.6	`CVE-2024-0631`	5.3 Medium	Francesco Carlucci	Yes

Showing 1–2 of 2 reports

Latestv2.11.14

Duitku Payment Gateway

Author

rayhanduitku

4.0(2)

80/100

Last Updated

2026-03-03 (6mo ago)

Active Installs

700+

Downloads

24,463

Requires WP

4.7+

Requires PHP

Tested up to

WP 6.7.7

Created

2021-04-08 (6y ago)

Do you want the best solution to accept Credit Cards, e-wallet, and Various Bank Transfers on your website? Our Payment Gateway for WooCommerce plugin integrates with your WooCommerce store and lets you accept those payments through our payment gateway. Securely accept major credit cards, View and manage transactions from one convenient place – your Duitku dashboard. Supported Payment Channels : Credit Card Aggregator full-payment (Visa, Master, JCB) Credit Card Facilitator installment and full-payment (Visa, Master, JCB, AMEX) BCA KlikPay BCA Virtual Account Mandiri Virtual Account Permata Bank Virtual Account ATM Bersama CIMB Niaga Virtual Account BNI Virtual Account Maybank Virtual Account Retail (Alfamart, Pegadaian and Pos Indonesia) OVO Indodana Paylater Shopee Pay Shopee Pay Apps Bank Artha Graha LinkAja Apps (Percentage Fee) LinkAja Apps (Fixed Fee) DANA LinkAja QRIS Indomaret PosPay BNC BRIVA QRIS by Nobu ATOME Gudang Voucher QRIS Jenius Pay Bank Sahabat Sampoerna Danamon Virtual Account BSI Virtual Account Nusapay QRIS Tokopedia Card Payment Tokopedia E-Wallet Tokopedia Others

View on WordPress.org