6 matches found
CVE-2026-103372
The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning its confirmation link, allowing unauthenticated users to obtain any paid order's key and, for recent guest orders, view the customer's personal details...
CVE-2026-103372 Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key Disclosure
The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning its confirmation link, allowing unauthenticated users to obtain any paid order's key and, for recent guest orders, view the customer's personal details...
CVE-2026-103372
The Payconiq WordPress plugin (version 1.0.4 and earlier) contains a vulnerability where it fails to verify if a visitor is authorized to view an order before providing a confirmation link. This flaw allows unauthenticated users to obtain keys for any paid order. Additionally, for recent guest or...
EUVD-2026-111697
The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning its confirmation link, allowing unauthenticated users to obtain any paid order's key and, for recent guest orders, view the customer's personal details...
WordPress Payconiq plugin <= 1.0.4 - Unauthenticated Order Key Disclosure vulnerability
Unauthenticated Order Key Disclosure vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Payconiq versions = 1.0.4...
PT-2026-127814
The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning its confirmation link, allowing unauthenticated users to obtain any paid order's key and, for recent guest orders, view the customer's personal details...