CVE Intelligence

Rupantorpay vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Rupantorpay products: 1 record(s), with severity, exploitation and fixes.

Rupantorpay 1

Exploited only (KEV) →

CVE-2025-15511 Medium · 5.3 CWE-862 Jan 28, 2026
Rupantorpay <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification
The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_webhook() function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to modify WooCommerce order statuses by sending crafted requests to the WooCommerce API endpoint.