UNKNOWN NVD

CVE-2026-103332

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying o

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation secret that is empty by default, allowing unauthenticated attackers to forge a valid payment confirmation and mark any order as paid.

References

https://wpscan.com/vulnerability/d8667422-5fcf-4904-8383-e5f601399153/

Published: 2026-10-27 · Source: NVD · Feed updated: 2026-10-27

This unknown severity vulnerability was published on 2026-10-27 via NVD.

vulnfeed aggregates 18707 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.