iPOSpays Payment Gateway for WooCommerce

iPOSpays Payment Gateway for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for iPOSpays Payment Gateway for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by Legion Hunter. iPOSpays Payment Gateway for WooCommerce is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all iPOSpays Payment Gateway for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-39608

iPOSpays Gateways WC <= 1.3.7 - Unauthenticated Missing Authorization to Settings Update via REST API Endpoint

Read the full analysis

Vulnerability Records

1 records


2026-02-07 00:00	iPOSpays Gateways WC <= 1.3.7 - Unauthenticated Missing Authorization to Settings Update via REST API Endpoint iPOSpays Payment Gateway for WooCommerce <= 1.3.7	`CVE-2026-39608`	5.3 Medium	Legion Hunter	Yes

Showing 1–1 of 1 reports

Latestv1.4.7

iPOSpays Payment Gateway for WooCommerce

Author

iPOSPays

0.0(0)

0/100

Last Updated

2026-10-15 (4d ago)

Active Installs

200+

Downloads

6,076

Requires WP

7.0+

Requires PHP

7.4+

Tested up to

WP 7.1.3

Created

2024-10-01 (2y ago)

Requires Plugins

woocommerce

The iPOSpays Payment Gateway for WooCommerce enables merchants to securely accept Credit/Debit Cards, ACH (Bank), Apple Pay, Google Pay, PayPal, and other supported payment methods through Embedded and Hosted Payment Page (HPP) checkout experiences. Supported Payment Methods (Hosted Payment Page – Redirect) Credit/Debit Cards Google Pay Apple Pay ACH (Bank) Alternative Payment Methods Supported Payment Methods (Embedded Checkout) Credit/Debit Cards Google Pay Apple Pay ACH (Bank) To use Google Pay, customers must use a supported browser such as Google Chrome. To use Apple Pay, customers must use a supported Apple device and Safari browser. For Embedded Checkout, you must whitelist your domain: How to Setup Whitelisted Domain on iPOSpays Demo View all supported payment methods: Demo Store Google Pay Support iPOSpays supports Google Pay, allowing customers to complete secure and fast payments using their Google Account on supported mobile and desktop devices. Google Pay Privacy Policy and Google Pay Terms of Service Apple Pay Support iPOSpays supports Apple Pay, enabling customers to complete fast and secure payments using Apple devices. To enable Apple Pay, merchants must have an Apple Developer Account and register their domain with Apple. How to set up Apple Pay for Your iPOSpays Merchant Account Apple Pay Privacy Policy and Apple Pay Terms of Service

View on WordPress.org