CVE-2026-10599: Insufficient Verification of Data Authenticity

The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to the order being marked as paid, nor does it verify the authenticity of its payment-completion request, allowing unauthenticated attackers to reuse a single valid...

PT-2026-68635

Name of the Vulnerable Software and Affected Versions Integrate PhonePe with WooCommerce WordPress plugin versions prior to 1.2.2 Description The plugin fails to validate whether a verified payment transaction is associated with the specific order being marked as paid. Additionally, it does not...