linknacional
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit | 2 | – | Jan 16, 2026 |
| Invoice Payment for WooCommerce | 1 | – | Dec 13, 2024 |
| Link Invoice Payment for WooCommerce | 1 | – | Jan 27, 2026 |
| Payment Gateway Pix For GiveWP | 1 | – | Mar 13, 2026 |
| Pix for WooCommerce | 1 | – | Mar 13, 2026 |
Exploited and recent CVEs
- CVE-2026-32425 WordPress Payment Gateway Pix For GiveWP plugin <= 2.2.3 - Broken Access Control vulnerability 0.2%
- CVE-2026-3891 Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload 32.4%
- CVE-2025-14971 Link Invoice Payment for WooCommerce <= 2.8.0 - Missing Authorization to Unauthenticated Arbitrary Partial Payment Creation/Cancellation 0.3%
- CVE-2026-0939 Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.2 - Unauthenticated Order Status Manipulation 0.2%
- CVE-2026-0942 Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.5 - Missing Authorization to Unauthenticated Rede Order Logs Deletion 0.3%
- CVE-2024-54328 WordPress Invoice Payment for WooCommerce plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%