WordPress security by component

Novalnet Payment Gateway for WooCommerce

Plugin description

Novalnet Payment Gateway for WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 02, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: woocommerce-novalnet-gateway

Latest vulnerability

CVE-2026-57677: Novalnet Payment Gateway for WooCommerce: Code execution

Novalnet Payment Gateway for WooCommerce is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is n/a through 12.10.3.

PublishedJul 02, 2026

Known safe version12.10.4

		Safe version
Jul 02, 2026	CVE-2026-57677 Novalnet Payment Gateway for WooCommerce: Code execution Novalnet Payment Gateway for WooCommerce is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is n/a through 12.10.3.	12.10.4	CVE9.8 NVDPending