CVE-2026-111957

The SUMIT Payment Gateway for WooCommerce WordPress plugin, specifically versions prior to 4.0.0 , is vulnerable to an unauthenticated payment confirmation forgery . The root cause is that the plugin fails to bind confirmed payments to specific completed orders and does not verify the payment amo...