PT-2026-5887 · WordPress+1 · Chapa Payment Gateway Plugin For Woocommerce+1

CVE-2025-15482 · Publicado 2026-02-04 · Atualizado 2026-02-04

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chapa Payment Gateway Plugin for WooCommerce versions up to and including 1.0.3

Description The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is susceptible to sensitive information disclosure. An unauthenticated attacker can extract sensitive data, including the merchant's Chapa secret API key, through the 'chapa proceed' API endpoint. The chapa proceed endpoint is the point of access for this issue.

Recommendations Update the Chapa Payment Gateway Plugin for WooCommerce to a version later than 1.0.3.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2025-15482

Produtos afetados

Chapa Payment Gateway Plugin For Woocommerce

Woocommerce

Referências · 5

• https://t.me/CVEtracker/43701 · Publicação no Telegram
• https://plugins.trac.wordpress.org/browser/chapa-payment-gateway-for-woocommerce/tags/1.0.3/includes/class-waf-wc-chapa-gateway.php#L418 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-15482 · Nota de Segurança
• https://t.me/cveNotify/150831 · Publicação no Telegram
• https://wordfence.com/threat-intel/vulnerabilities/id/190492ec-5982-4dce-9e97-16a518a01a27?source=cve · Nota