Medium severity5.3NVD Advisory· Published Jan 24, 2026· Updated Apr 15, 2026
CVE-2025-14843
CVE-2025-14843
Description
The Wizit Gateway for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Order Cancellation in all versions up to, and including, 1.2.9. This is due to a lack of authentication and authorization checks in the 'handle_checkout_redirecturl_response' function. This makes it possible for unauthenticated attackers to cancel arbitrary WooCommerce orders by sending a crafted request with a valid order ID.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <= 1.2.9
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.