Chapaet vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Chapaet products: 1 record(s), with severity, exploitation and fixes.

Chapa Payment Gateway Plugin for WooCommerce 1

Exploited only (KEV) →

CVE-2025-15482 Medium · 5.3 CWE-200 Feb 4, 2026

Chapa Payment Gateway Plugin for WooCommerce <= 1.0.3 - Unauthenticated Sensitive Information Exposure

The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 via 'chapa_proceed' WooCommerce API endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including the merchant's Chapa secret API key.