CVE-2026-73398

MediumCVSS 6.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

The Piraeus Bank WooCommerce Payment Gateway plugin version 3.2.0 has a broken authentication vulnerability that does not require authentication. This means an unauthenticated attacker can gain unauthorized access to functions or data.

Risk Assessment

The risk is that an attacker without logging in can access sensitive functions or data, potentially leading to confidentiality and integrity breaches.

Recommendation

It is recommended to update the plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions.