Wizit Gateway for WooCommerce
Wizit Gateway for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Wizit Gateway for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by MD. TAREQ AHAMED JONY (itztrq). Wizit Gateway for WooCommerce is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-14843Wizit Gateway for WooCommerce <= 1.3.1 - Missing Authentication to Unauthenticated Arbitrary Order Cancellation
Read the full analysisVulnerability Records

Wizit Gateway for WooCommerce
Author
Albert
woocommerceThe “Wizit Gateway for WooCommerce” plugin provides the option to choose Wizit as the payment method at the checkout. It also provides the functionality to display the Wizit logo and instalment calculations below product prices on category pages, individual product pages, and on the cart page. For each payment that is approved by Wizit, an order will be created inside the WooCommerce system like any other order.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C