PT-2025-47279 · Unknown+1 · Woocommerce+1

Abhirup Konwar · Published 2025-11-18 · Updated 2025-11-18 · CVE-2025-12392

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cryptocurrency Payment Gateway for WooCommerce plugin for WordPress versions through 2.0.22

Description The Cryptocurrency Payment Gateway for WooCommerce plugin for WordPress is susceptible to unauthorized data modification. This is due to a missing capability check within the handle optin optout() function, allowing unauthenticated attackers to control tracking preferences by opting in and out of tracking.

Recommendations Update the Cryptocurrency Payment Gateway for WooCommerce plugin to a version later than 2.0.22.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-12392

Affected Products

Cryptocurrency Payment Gateway For Woocommerce

Woocommerce

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-12392 · Security Note
• https://twitter.com/CVEnew/status/1990717531548479655 · Twitter Post
• https://t.me/cveNotify/143170 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3446959%40triplea-cryptocurrency-payment-gateway-for-woocommerce&new=3446959%40triplea-cryptocurrency-payment-gateway-for-woocommerce&sfp_email=&sfph_mail= · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/96d48392-fb64-4e5e-be9c-21df0bf75de6?source=cve · Note
• https://twitter.com/VulmonFeeds/status/1990841209858752534 · Twitter Post
• https://wordpress.org/plugins/triplea-cryptocurrency-payment-gateway-for-woocommerce · Note
• https://t.me/CVEtracker/37597 · Telegram Post