rayhanduitku vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-32468Duitku Payment Gateway (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere High7.5EPSS 0.4%2026-08-18CVE Database V5CVE-2026-32468 Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions. EPSS 0.4%Vulnerability rayhanduitku CWE-497	CVE Database V5	2026-08-18
Medium	5.3	EPSS 0.6%	CVE-2024-0631Duitku Payment Gateway (WordPress plugin) · Improper Access Control Medium5.3EPSS 0.6%2024-03-13CVE Database V5CVE-2024-0631 The Duitku Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the check_duitku_response function in all versions up to, and including, 2.11.6. This makes it possible for unauthenticated attackers to change the payment status of orders to failed. EPSS 0.6%Vulnerability rayhanduitku CWE-284	CVE Database V5	2024-03-13

Page 1 of 1