iPOSpays Payment Gateway for WooCommerce

iPOSpays Payment Gateway for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for iPOSpays Payment Gateway for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by Legion Hunter. iPOSpays Payment Gateway for WooCommerce is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all iPOSpays Payment Gateway for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-39608

iPOSpays Gateways WC <= 1.3.7 - Unauthenticated Missing Authorization to Settings Update via REST API Endpoint

Read the full analysis

Vulnerability Records

1 records


2026-02-07 00:00	iPOSpays Gateways WC <= 1.3.7 - Unauthenticated Missing Authorization to Settings Update via REST API Endpoint iPOSpays Payment Gateway for WooCommerce <= 1.3.7	`CVE-2026-39608`	5.3 Medium	Legion Hunter	Yes

Showing 1–1 of 1 reports

Latestv1.4.0

iPOSpays Payment Gateway for WooCommerce

Author

iPOSPays

0.0(0)

0/100

Last Updated

2026-06-18 (2mo ago)

Active Installs

100+

Downloads

4,762

Requires WP

6.8+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2024-10-01 (2y ago)

Requires Plugins

woocommerce

A powerful WooCommerce gateway plugin that enables you to accept major credit cards, Google Pay, Apple Pay, ACH, and alternative payment methods with ease. Supported Payment Methods in Redirect Credit/Debit Cards Google Pay Apple Pay Bank (ACH) Alternative Payments To use Google Pay, visit the site using a supported browser like Chrome. To use Apple Pay, visit the site using an iOS device. Supported Payment Methods in Embedded Method Credit/Debit Cards only Google Pay Apple Pay Bank (ACH) Other payment methods for the embedded option will be added shortly. Visit our demo site to see all the payment methods in action Demo Site To use Google Pay, visit the site using a supported browser like Chrome. To use Apple Pay, visit the site using an iOS device. Google Pay Support iPOSpays includes Google Pay support, allowing customers to quickly and securely pay using payment details saved to their Google Account. With Google Pay, checkout is as easy as a single tap on mobile and desktop devices. Google Pay: For more information regarding data handling and user privacy, please refer to the following: Google Pay Privacy Policy Google Pay Terms of Service Apple Pay Support iPOSpays includes Apple Pay enabling customers to make fast and secure payments using their Apple devices. Merchants can integrate Apple Pay on their websites or apps to provide a seamless checkout experience. To enable Apple Pay, the merchant must have an Apple Developer Account to register their domain for Apple Pay transactions Apple Pay: For more information regarding data handling and user privacy, please refer to the following: Apple Pay Privacy Policy Apple Pay Terms of Service

View on WordPress.org