2 matches found
CVE-2026-13692
The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
5.3CVSS0.00304EPSS
SaveExploits0References1
CVE-2026-13692
The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
5.3CVSS5.4AI score0.00304EPSS
SaveExploits0References1
20