SiteRespond
Scan

Software intelligence

Cartasi X Pay vulnerabilities

2 tracked advisories · slug cartasi-x-pay

Important: Cartasi X Pay appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

2

Latest advisory

17 June 2026

CISA KEV matches

0

In this WordPress feed

WordPress slug

cartasi-x-pay

Plugin

What this means for Cartasi X Pay

This catalog lists 2 known advisories affecting Cartasi X Pay. The most recent was published on 17 June 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

  • Nexi XPay <= 8.3.1 - Missing Authorization

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 17 June 2026

  • Nexi XPay <= 8.3.0 - Missing Authorization to Unauthenticated Order Status Modification

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 14 April 2026

Vulnerability types

    Authentication (inferred from titles)

    • Unauthenticated1
    • Authenticated0
    • Unspecified1

    Advisory history

    Known Cartasi X Pay advisories published by month.

    All advisories

    Check whether your installed version is affected

    SiteRespond Defence matches your installed Cartasi X Pay version against this catalog when the Defence plugin is connected to your WordPress site.

    Start SiteRespond Defence for WordPress — £29.99/monthScan your website