CVE-2026-103376

The PeachPay — Payments & Express Checkout for WooCommerce WordPress plugin, versions 1.117.9 through 1.120.69 , is vulnerable to unauthenticated order key disclosure. The software fails to perform necessary capability or ownership checks before returning an order's secret key in response to an u...