WordPress plugin
CryptoCloud – Crypto Payment Gateway security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium2
- Low0
All CryptoCloud – Crypto Payment Gateway vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | 3.0.1 - Unauthenticated Arbitrary Order Status Manipulation 3.0.0 – 3.0.1No patch available | CVE-2026-103327 | |
| Medium5.3 | Crypto Payment Gateway <= 2.1.2 - Missing Authorization ≤2.1.2Update to 2.3.2 | CVE-2025-48147 |
- Medium5.33.0.1 - Unauthenticated Arbitrary Order Status Manipulation
3.0.0 – 3.0.1No patch available
- Medium5.3Crypto Payment Gateway <= 2.1.2 - Missing Authorization
≤2.1.2Update to 2.3.2
CryptoCloud – Crypto Payment Gateway: common questions
Does CryptoCloud – Crypto Payment Gateway have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in CryptoCloud – Crypto Payment Gateway: 2 medium. At least one is not fixed in the latest version.
How do I check which version of CryptoCloud – Crypto Payment Gateway I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CryptoCloud – Crypto Payment Gateway vulnerability?
CVE-2026-103327, published Oct 31, 2026: CryptoCloud – Crypto Payment Gateway 3.0.0 - 3.0.1 - Unauthenticated Arbitrary Order Status Manipulation. Severity: Medium (CVSS 5.3).
Is any CryptoCloud – Crypto Payment Gateway vulnerability listed in CISA KEV?
No. None of the known CryptoCloud – Crypto Payment Gateway vulnerabilities is currently listed in the CISA KEV catalog.