2 matches found
EUVD-2026-50118
The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
5.3CVSS5.9AI score0.00136EPSS
SaveExploits0References1
PT-2026-65694
The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
5.9AI score0.00136EPSS
SaveExploits0References1
20