WordPress plugin
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High1
- Medium2
- Low0
All Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated SQL Injection ≤1.7.6No patch available | CVE-2025-26535 | |
| Critical9.8 | Unauthenticated SQL Injection ≤1.7.2Update to 1.7.3 | CVE-2022-4118 |
- High7.5Unauthenticated SQL Injection
≤1.7.6No patch available
- Critical9.8Unauthenticated SQL Injection
≤1.7.2Update to 1.7.3
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop: common questions
Does Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop: 1 critical, 1 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop vulnerability?
CVE-2025-26541, published Mar 20, 2025: Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop vulnerability listed in CISA KEV?
No. None of the known Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop vulnerabilities is currently listed in the CISA KEV catalog.