WordPress plugin
Payment Gateway for Redsys & WooCommerce Lite security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All Payment Gateway for Redsys & WooCommerce Lite vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Improper Verification of Cryptographic Signature to Unauthenticated Payment Status Manipulation ≤7.0.0Update to 7.0.1 | CVE-2026-5050 |
- High7.5Improper Verification of Cryptographic Signature to Unauthenticated Payment Status Manipulation
≤7.0.0Update to 7.0.1
Payment Gateway for Redsys & WooCommerce Lite: common questions
Does Payment Gateway for Redsys & WooCommerce Lite have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Payment Gateway for Redsys & WooCommerce Lite: 1 high, 2 medium. None are known to affect version null.
How do I check which version of Payment Gateway for Redsys & WooCommerce Lite I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Payment Gateway for Redsys & WooCommerce Lite vulnerability?
CVE-2026-12584, published Jul 29, 2026: Payment Gateway for Redsys & WooCommerce Lite <= 7.0.1 - Unauthenticated Payment Bypass. Severity: Medium (CVSS 5.3).
Is any Payment Gateway for Redsys & WooCommerce Lite vulnerability listed in CISA KEV?
No. None of the known Payment Gateway for Redsys & WooCommerce Lite vulnerabilities is currently listed in the CISA KEV catalog.