The vulnerability identified as CVE-2025-26535 affects the CodeSolz Bitcoin / AltCoin Payment Gateway for WooCommerce plugin (versions up to 1.7.6). It is caused by improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. The CVSS v3.1 base score is 9.3, indicating a critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and a scope change. The impact includes high confidentiality loss and low availability impact. No vendor advisory or patch information is currently available, and the plugin is not a cloud service.

Successful exploitation of this vulnerability can allow an unauthenticated attacker to perform Blind SQL Injection, potentially leading to unauthorized disclosure of sensitive information from the backend database. The confidentiality impact is high, while integrity impact is not indicated, and availability impact is low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting access to the affected plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.