Skip to content

Zarinpal Gateway vulnerabilities

zarinpal gatewayWordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-654604.3 MediumJuly 23, 2026
zarinpal gatewayZarinpal Gateway for WooCommerce <= 5.0.16 - Improper Access Control to Payment Status UpdateCVE-2026-25927.7 HighFebruary 17, 2026