CVE-2026-121970

The Pay with Vipps and MobilePay for WooCommerce (woo-vipps) plugin, in versions prior to 6.4.1 , is vulnerable to an improper cryptographic signature verification in the recurring-payment webhook handler . The root cause is that the code fails to exit when a local webhook secret is missing, inst...