WordPress Security Bulletin: Xendit Payment Plugin Vulnerability (CVE-2025-14461)
Security Alert Summary The Xendit Payment plugin for WordPress (WooCommerce integration) contains an unauthenticated order status manipulation vulnerability. A publicly accessible callback endpoint accepts payment callbacks without authentication or cryptographic…
Read security notice