CVE-2026-4663 | iPOSpays Gateways WC Plugin up to 1.3.7 on WordPress REST API Endpoint save_settings authorization

A vulnerability has been found in iPOSpays Gateways WC Plugin up to 1.3.7 on WordPress and classified as critical. Impacted is an unknown function of the file /wp-json/ipospays/v1/save_settings of the component REST API Endpoint. The manipulation leads to missing authorization.

This vulnerability is traded as CVE-2026-4663. It is possible to initiate the attack remotely. There is no exploit available.