Advisories · Technology

Zarinpal Gateway.

Every CVE that names Zarinpal Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65460 CVE record

CVSS 4.3 Medium

WordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability
- Zarinpal Gateway
- Cross-site request forgery (CSRF)
Not analysed yet 23 Jul 2026
CVE-2026-2592 CVE record

CVSS 7.7 High

Zarinpal Gateway for WooCommerce <= 5.0.16 - Improper Access Control to Payment Status Update
- Zarinpal Gateway
- Broken access control
Not analysed yet 17 Feb 2026