WordPress plugin
Peach Payments Gateway security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All Peach Payments Gateway vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤4.0.2Update to 4.0.3 | CVE-2026-57408 | |
| Medium5.3 | Missing Authorization ≤3.3.6Update to 3.3.7 | CVE-2025-67942 | |
| Medium4.3 | Missing Authorization via peach_core_version_rollback() ≤3.1.9Update to 3.2.0 | CVE-2024-25922 |
- Medium5.3Missing Authorization
≤4.0.2Update to 4.0.3
- Medium5.3Missing Authorization
≤3.3.6Update to 3.3.7
- Medium4.3Missing Authorization via peach_core_version_rollback()
≤3.1.9Update to 3.2.0
Peach Payments Gateway: common questions
Does Peach Payments Gateway have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Peach Payments Gateway: 3 medium. None are known to affect version null.
How do I check which version of Peach Payments Gateway I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Peach Payments Gateway vulnerability?
CVE-2026-57408, published Jul 8, 2026: Peach Payments Gateway <= 4.0.2 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Peach Payments Gateway vulnerability listed in CISA KEV?
No. None of the known Peach Payments Gateway vulnerabilities is currently listed in the CISA KEV catalog.