CVE-2026-104337

The Razorpay for WooCommerce WordPress plugin (versions before 4.8.9 ) contains a vulnerability where it fails to verify order ownership before returning a calculated coupon discount. This flaw allows unauthenticated attackers to disclose the monetary value of arbitrary customer orders by enumera...