PT-2026-7486 · WordPress · Pix Para Woocommerce

CVE-2025-15400 · Publicado 2026-02-11 · Atualizado 2026-02-11

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Pix para Woocommerce WordPress plugin versions through 2.13.3

Description The plugin allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without proper capability or nonce checks. This allows authenticated users, including those with subscriber privileges, to clear API credentials and webhook status, leading to persistent disruption of OpenPix payment functionality.

Recommendations Update Pix para Woocommerce to a version later than 2.13.3.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2025-15400

Produtos afetados

Pix Para Woocommerce

Referências · 4

• 🔥 https://wpscan.com/vulnerability/54c1251f-96be-4d70-b773-3db26b599838 · Exploit
• https://t.me/CVEtracker/44379 · Publicação no Telegram
• https://t.me/cveNotify/151661 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-15400 · Nota de Segurança