Campay vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Campay products: 1 record(s), with severity, exploitation and fixes.

Campay Woocommerce Payment Gateway 1

Exploited only (KEV) →

CVE-2025-12883 Medium · 5.3 CWE-639 Dec 12, 2025

Campay Woocommerce Payment Gateway <= 1.2.2 - Unauthenticated Payment Bypass

The Campay Woocommerce Payment Gateway plugin for WordPress is vulnerable to Unauthenticated Payment Bypass in all versions up to, and including, 1.2.2. This is due to the plugin not properly validating that a transaction has occurred through the payment gateway. This makes it possible for unauthenticated attackers to bypass payments and mark orders as successfully completed resulting in a loss of income.