CVE-2026-86791
CVE-2026-86791 · iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to rewrite its total.
CVSS 5.3 · Media · EPSS 0,1% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
ipospays payment gateway for woocommerce
- Versiones
- ≥ 0, < 1.4.7: Afectada (semver)
Actualiza a 1.4.7