Eupago Gateway For Woocommerce

Eupago Gateway For Woocommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 5.0, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 3 issues recorded for Eupago Gateway For Woocommerce has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

01234567891012.10.2023Today12.10.20234.3Eupago Gateway For Woocommerce <= 3.1.9 - Cross-Site Request Forgery via eupago_page_content CVSS 4.3 · 12.10.202308.12.20255.3Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization CVSS 5.3 · 08.12.202507.05.20265.3Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization to Unauthenticated Arbitrary Refund Initiation CVSS 5.3 · 07.05.2026

Strategic Overview

Avg CVSSMedium
5.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Eupago Gateway For Woocommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-7862

Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization to Unauthenticated Arbitrary Refund Initiation

Read the full analysis

Vulnerability Records

3 records
Showing 1–3 of 3 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C