CVE-2026-4663

creationtimestamp| type| source ---|---|--- 2026-05-12 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlox6jegzl2s...

CVE-2026-4663

The CVE-2026-4663 entry is linked to the WordPress payment plugin issue described by EUVD-2026-29394: the iPOSpays Gateways WC plugin for WordPress has a Missing Authorization vulnerability up to version 1.3.7. The root cause is a REST API endpoint exposed at /wp-json/ipospays/v1/save_settings wh...