CVE-2025-58634: WordPress PeachPay Payments Plugin <= 1.117.4 - Broken Access Control Vulnerability
Missing Authorization vulnerability in peachpay PeachPay Payments allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PeachPay Payments: from n/a through 1.117.4.
Other sources
Missing Authorization vulnerability in peachpay PeachPay Payments peachpay-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PeachPay Payments: from n/a through <= 1.117.4.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58634?
CVE-2025-58634 is classified as a high severity vulnerability due to its potential impact on unauthorized access to sensitive information.
How do I fix CVE-2025-58634?
To fix CVE-2025-58634, update PeachPay Payments to version 1.117.5 or later to ensure proper access controls are enforced.
Which versions of PeachPay Payments are affected by CVE-2025-58634?
CVE-2025-58634 affects PeachPay Payments versions from n/a through 1.117.4.
What type of vulnerability is CVE-2025-58634?
CVE-2025-58634 is a Missing Authorization vulnerability resulting from incorrectly configured access control security levels.
Does CVE-2025-58634 affect other plugins?
Yes, CVE-2025-58634 also affects the WordPress PeachPay Payments Plugin up to version 1.117.4.