Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

10 matches found

NVD
NVD•added 2026/08/22 6:16 a.m.•13 views

CVE-2026-16738

The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...

5.3CVSS0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/08/22 6:00 a.m.•36 views

CVE-2026-16738 Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery

The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...

0.0024EPSS
SaveExploits0References1
CVE
CVE•added 2026/08/22 6:00 a.m.•51 views

CVE-2026-16738

The Conekta Payment Gateway WordPress plugin (versions before 6.2.2 ) fails to verify the authenticity of incoming payment gateway webhook notifications and does not bind the confirmed payment to the targeted order or validate its amount. This allows unauthenticated attackers to forge webhook req...

5.3CVSS5.7AI score0.0024EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/08/22 6:00 a.m.•18 views

EUVD-2026-64218

The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...

5.7AI score0.0024EPSS
SaveExploits0References1
NVD
NVD•added 2026/06/15 9:17 p.m.•30 views

CVE-2026-49066

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...

7.5CVSS0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/06/15 8:19 p.m.•11 views

CVE-2026-49066 WordPress Conekta Payment Gateway plugin <= 6.0.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...

7.5CVSS5.2AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:19 p.m.•37 views

CVE-2026-49066 WordPress Conekta Payment Gateway plugin <= 6.0.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...

7.5CVSS0.00294EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/06/15 8:19 p.m.•16 views

EUVD-2026-36873

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...

7.5CVSS5.2AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/06/15 12:00 a.m.•34 views

PT-2026-49503

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...

7.5CVSS5.2AI score0.00294EPSS
SaveExploits0References2
Patchstack
Patchstack•added 2026/06/08 2:00 p.m.•13 views

WordPress Conekta Payment Gateway plugin <= 6.0.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by dodoh4t in WordPress Plugin Conekta Payment Gateway versions = 6.0.0...

7.5CVSS5.5AI score0.00294EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder