23 matches found
CVE-2026-95527
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
EUVD-2026-85495
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
CVE-2026-95527 WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
CVE-2026-95527
The Conekta Payment Gateway WordPress plugin, versions
CVE-2026-95527 WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by anhcd05 in WordPress Plugin Conekta Payment Gateway versions = 6.2.4...
CVE-2026-95527: Missing Authorization
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
PT-2026-97480
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
CVE-2026-16738
The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...
CVE-2026-16738
The Conekta Payment Gateway WordPress plugin, in versions before 6.2.2 , is vulnerable to unauthenticated order payment completion due to a lack of verification for incoming webhook notifications . The plugin fails to verify the authenticity of these notifications, does not bind confirmed payment...
CVE-2026-16738 Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery
The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...
WordPress Conekta Payment Gateway plugin < 6.2.2 - Unauthenticated Order Payment Completion vulnerability
Unauthenticated Order Payment Completion vulnerability discovered by Pedro Pinho in WordPress Plugin Conekta Payment Gateway versions 6.2.2...
CVE-2026-16738 Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery
The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...
EUVD-2026-64218
The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...
PT-2026-79509
Name of the Vulnerable Software and Affected Versions Conekta Payment Gateway versions prior to 6.2.2 Description The plugin fails to verify the authenticity of incoming payment gateway webhook notifications. Additionally, it does not bind confirmed payments to the targeted order or verify the...
CVE-2026-16738: Improper Access Control
The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without...
CVE-2026-49066
Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...
CVE-2026-49066 WordPress Conekta Payment Gateway plugin <= 6.0.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway = 6.0.0 versions...