WordPress UnitechPay plugin <= 1.0.6.3 - Unauthenticated Order Payment Bypass vulnerability

Unauthenticated Order Payment Bypass vulnerability discovered by Timur in WordPress Plugin UnitechPay versions = 1.0.6.3...

CVE-2026-87841 UnitechPay <= 1.0.6.3 - Unauthenticated Order Payment Bypass via Unsigned Webhook

The UnitechPay WordPress plugin through 1.0.6.3 does not verify the authenticity of the payment notifications it receives, allowing unauthenticated attackers to mark orders placed through it as paid without any payment being made, as well as to force other orders into a failed state...

CVE-2026-87841

The UnitechPay WordPress plugin (versions through 1.0.6.3 ) is vulnerable to an unauthenticated order payment bypass due to a lack of verification for the authenticity of received payment notifications. This allows unauthenticated attackers to exploit unsigned webhooks to mark orders as paid with...

CVE-2026-107636 pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController

pH7Builder pH7 Social Dating CMS before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields. Attackers can set itemnumber, cartorderid, or the PayPal custom field while...

CVE-2026-103517 Airwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook

The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying...

CVE-2026-103517

The Airwallex Online Payments Gateway WordPress plugin, in versions prior to 1.36.0 , is vulnerable to an unauthenticated payment bypass. The root cause is a failure to verify the authenticity of incoming payment notifications when no webhook secret is configured. This allows unauthenticated atta...

WordPress Nexi XPay Build plugin <= 7.6.2 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, Iñigo Sánchez Enciso in WordPress Plugin Nexi XPay Build versions = 7.6.2...

CVE-2026-82212 Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...

CVE-2026-82212

The Nexi XPay Build WordPress plugin (version 7.6.2 and below ) contains a vulnerability where the payment notification route fails to correctly validate the security token. Specifically, the plugin accepts requests when the target order lacks a stored token. This allows unauthenticated attackers...

CVE-2026-82212 Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...

WordPress Deema Payment Gateway plugin <= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation vulnerability

Unauthenticated Payment Bypass and Order Manipulation vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Deema Payment Gateway versions = 1.1.2...

CVE-2026-94270 Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation via Webhook

The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by default, allowing unauthenticated attackers to mark an unpaid order as paid, or to cancel or refund an existing order...

CVE-2026-94270 Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation via Webhook

The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by default, allowing unauthenticated attackers to mark an unpaid order as paid, or to cancel or refund an existing order...

CVE-2026-94270

The Deema Payment Gateway WordPress plugin (versions

WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability

Payment Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin GiveWP versions = 4.16.8.1...

WordPress MStore API plugin 4.21.1-4.22.0 - Subscriber+ Payment Bypass vulnerability

Subscriber+ Payment Bypass vulnerability discovered by cyberkareem in WordPress Plugin MStore API versions 4.21.1-4.22.0...

CVE-2026-97219 MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter

The MStore API WordPress plugin before 4.22.1 does not restrict which fields of an order a customer may update, allowing any authenticated user with a self-registerable account to change the status of their own unpaid order to a paid or fulfilled state and receive the goods without paying...

CVE-2026-97219 MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter

The MStore API WordPress plugin before 4.22.1 does not restrict which fields of an order a customer may update, allowing any authenticated user with a self-registerable account to change the status of their own unpaid order to a paid or fulfilled state and receive the goods without paying...

WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

Payment Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Forminator versions = 1.57.2...

WordPress Verge3D Publishing and E-Commerce plugin 4.1.0-4.13.0 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, Iñigo Sánchez Enciso in WordPress Plugin Verge3D versions 4.1.0-4.13.0...