PatchSiren cyber security CVE debrief
CVE-2026-34891 IDPay CVE debrief
CVE-2026-34891 is a HIGH severity vulnerability with a CVSS score of 7.5. It is an unauthenticated sensitive data exposure vulnerability in the IDPay Payment Gateway for Woocommerce plugin versions <= 2.2.5. The vulnerability was published on [cvePublishedAt] and last modified on [cveModifiedAt].
- Vendor
- IDPay
- Product
- IDPay Payment Gateway for Woocommerce
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-15
- Original CVE updated
- 2026-06-15
- Advisory published
- 2026-06-15
- Advisory updated
- 2026-06-15
Who should care
Administrators and users of the IDPay Payment Gateway for Woocommerce plugin versions <= 2.2.5 should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability has a CVSS vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N and is classified under CWE-497. The vulnerability allows unauthenticated attackers to access sensitive data.
Defensive priority
HIGH
Recommended defensive actions
- Update the IDPay Payment Gateway for Woocommerce plugin to a version greater than 2.2.5.
- Refer to [ref-4] for mitigation or vendor reference.
Evidence notes
The vulnerability was reported by Patchstack and is listed in the NVD database.
Official resources
-
CVE-2026-34891 CVE record
CVE.org
-
CVE-2026-34891 NVD detail
NVD
-
Source item URL
nvd_modified
- Mitigation or vendor reference
CVE-2026-34891 was published on 2026-06-15T21:16:41.737Z and last modified on 2026-06-15T21:24:32.790Z.