CVE-2026-12493

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin, in versions prior to 1.3.6 , is vulnerable to an unauthenticated payment bypass . The flaw exists because the plugin fails to verify if an approved external payment record corresponds to the specific WooCommerce order being p...