Eupago Gateway For Woocommerce

Eupago Gateway For Woocommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 3 issues recorded for Eupago Gateway For Woocommerce has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Eupago Gateway For Woocommerce is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

5.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Eupago Gateway For Woocommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-7862

Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization to Unauthenticated Arbitrary Refund Initiation

Read the full analysis

Vulnerability Records

3 records


2026-05-07 00:00	Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization to Unauthenticated Arbitrary Refund Initiation Eupago Gateway For Woocommerce <= 4.7.1	`CVE-2026-7862`	5.3 Medium	Pedro Pinho	Yes
2025-12-08 00:00	Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization Eupago Gateway For Woocommerce <= 4.7.1	`CVE-2025-62870`	5.3 Medium	0xd4rk5id3	Yes
2023-10-12 00:00	Eupago Gateway For Woocommerce <= 3.1.9 - Cross-Site Request Forgery via eupago_page_content Eupago Gateway For Woocommerce <= 3.1.9	`CVE-2023-45638`	4.3 Medium	Skalucy	Yes

Showing 1–3 of 3 reports

Latestv4.7.4

Eupago Gateway For Woocommerce

Author

Eupago

3.3(4)

66/100

Last Updated

2026-07-17 (2mo ago)

Active Installs

2,000+

Downloads

50,705

Requires WP

4.4+

Requires PHP

7.0+

Tested up to

WP 6.8.8

Created

2021-12-30 (5y ago)

Testado até à versão 8.2.11 de PHP Features: Este plugin permite disponibilizar aos clientes finais novos meios de pagamento nacionais e internacionais. O plugin atualiza automaticamente o estado da encomenda quando o pagamento é feito, assim como o stock do produto. geração de referências Multibanco Reference com ou sem data limite para pagamento. Os pagamentos são realizados via ATM ou Homebanking; geração de referências PayShop Reference. O pagamento é realizado numa vasta rede nacional; geração de um pedido de pagamento MB WAY. O pagamento é realizado na aplicação da MB WAY; geração de pedido de pagamentos via Cartão de Crédito; geração de pedido de pagamentos via CofidisPay (para valores estipulados pela Cofidis); geração de pedido de pagamentos via Bizum; geração de pedido de pagamentos via EuroPix; possibilita de fazer reembolsos directamente através da plataforma e-commerce; alteração automática do estado das encomendas para “Em Processamento” após o pagamento do cliente e informa o cliente final e o administrador da loja.

View on WordPress.org