WordPress plugin
Float Payment Gateway security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All Float Payment Gateway vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Improper Authorization to Unauthenticated Order Status Manipulation ≤1.1.9Update to 1.1.10 | CVE-2025-15513 |
- Medium5.3Improper Authorization to Unauthenticated Order Status Manipulation
≤1.1.9Update to 1.1.10
Float Payment Gateway: common questions
Does Float Payment Gateway have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Float Payment Gateway: 1 medium. None are known to affect version null.
How do I check which version of Float Payment Gateway I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Float Payment Gateway vulnerability?
CVE-2025-15513, published Jan 13, 2026: Float Payment Gateway <= 1.1.9 - Improper Authorization to Unauthenticated Order Status Manipulation. Severity: Medium (CVSS 5.3).
Is any Float Payment Gateway vulnerability listed in CISA KEV?
No. None of the known Float Payment Gateway vulnerabilities is currently listed in the CISA KEV catalog.