‹ Back to list

Cardinity

Cardinity Payment Gateway: vulnerabilities and CVEs

Cardinity Payment Gateway has 1 published vulnerabilities, 1 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs1
Last 12 months1
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-103324Medium (5.3)0.13%—Oct 15, 2026
The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default,…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1190 Exploit Public-Facing Application1
  2. T1565 Data Manipulation1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.