This vulnerability (CVE-2026-73398) in Piraeus Bank WooCommerce Payment Gateway version 3.2.0 allows unauthenticated attackers to bypass authentication mechanisms, categorized as CWE-288 (Authentication Bypass Using an Alternate Path or Channel). The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact includes no confidentiality loss but limited integrity and availability impacts. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

An unauthenticated attacker can bypass authentication controls in the affected version 3.2.0 of the payment gateway, potentially leading to limited integrity and availability impacts. There is no confidentiality impact reported. This could allow attackers to perform unauthorized actions that affect the integrity or availability of the payment gateway service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor vendor communications for updates and consider restricting access or applying compensating controls until a patch is available.