Missing Authorization in PeachPay Payments Affects Security Levels

CVE-2025-58634

What is CVE-2025-58634?

The PeachPay Payments plugin for WordPress exhibits a missing authorization vulnerability due to incorrectly configured access control security levels. This flaw could permit unauthorized users to gain access to restricted functionalities of the payment system. All versions from n/a through 1.117.4 are susceptible, potentially exposing sensitive payment data and transactions to exploitation by malicious entities. It's crucial for users to promptly assess their installations and ensure correct access controls are enforced to mitigate risks associated with this vulnerability.

References