WordPress plugin
WooCommerce GoCardless Gateway security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All WooCommerce GoCardless Gateway vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Unauthenticated Insecure Direct Object Reference ≤2.5.6Update to 2.5.7 | CVE-2023-37871 |
- Medium6.5Unauthenticated Insecure Direct Object Reference
≤2.5.6Update to 2.5.7
WooCommerce GoCardless Gateway: common questions
Does WooCommerce GoCardless Gateway have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in WooCommerce GoCardless Gateway: 1 medium. None are known to affect version null.
How do I check which version of WooCommerce GoCardless Gateway I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WooCommerce GoCardless Gateway vulnerability?
CVE-2023-37871, published Jul 10, 2023: WooCommerce GoCardless Gateway <= 2.5.6 - Unauthenticated Insecure Direct Object Reference. Severity: Medium (CVSS 6.5).
Is any WooCommerce GoCardless Gateway vulnerability listed in CISA KEV?
No. None of the known WooCommerce GoCardless Gateway vulnerabilities is currently listed in the CISA KEV catalog.