CardCom Payment Gateway

CardCom Payment Gateway has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for CardCom Payment Gateway has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Bao - BlueRock. CardCom Payment Gateway is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all CardCom Payment Gateway vulnerabilities before they are exploited.

Most severe open issueCVSS 6.5CVE-2025-57976

CardCom Payment Gateway <= 3.5.0.4 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2025-09-22 00:00	CardCom Payment Gateway <= 3.5.0.4 - Missing Authorization CardCom Payment Gateway <= 3.5.0.4	`CVE-2025-57976`	6.5 Medium	Bao - BlueRock	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv3.5.1.0

CardCom Payment Gateway

Author

CardCom

1.0(1)

20/100

Last Updated

2026-08-26 (19d ago)

Active Installs

3,000+

Downloads

79,691

Requires WP

3.3+

Requires PHP

7.4+

Tested up to

WP 6.7.7

Created

2017-12-21 (9y ago)

Requires Plugins

woocommerce

Cardcom Payment Gateway Allows your website to receive payments from your customers, via the WooCommerce plugin at checkout. Features This plugin supports various configurations & setups: WooCommerce Blocks Optional/required Tax-Company ID (TZ/CP) field at checkout, added to the invoice, with localized labels. Making credit-card deals & saving as “Payment Method” for returning customers. Making Credit-line “delayed” payments (aka “Capture charge”) PayPal integration Invoicing automatically upon payment (Requires module) Support for WooCommerce-Subscriptions General-use Tokens for recurring/on-going charges (implementation of CardCom’s API). References & Manuals Support article – settings and configurations Support article – receiving API-keys & terminal-number for setup General article – contacting Cardcom’s support team Contact-Us Page – contact-channels for CardCom’s departments More Info See additional technical & general info, see “References & Manuals” above. To read more about the provider of this service – visit https://www.CardCom.co.il

View on WordPress.org