Lucene search
+L

7 matches found

NVD
NVD
•added 2026/01/07 12:17 p.m.•23 views

CVE-2026-0656

The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 2.0.2 via the 'checkipaymuresponse' function. This is due to the plugin not validating webhook request authenticity through signature verification or origi...

8.2CVSS0.00344EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/07 6:36 a.m.•43 views

CVE-2026-0656 iPaymu Payment Gateway for WooCommerce <= 2.0.2 - Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure

The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 2.0.2 via the 'checkipaymuresponse' function. This is due to the plugin not validating webhook request authenticity through signature verification or origi...

8.2CVSS0.00344EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/07 6:36 a.m.•58 views

CVE-2026-0656

The CVE-2026-0656 entry concerns the iPaymu Payment Gateway for WooCommerce (WordPress). Wordfence reports a Missing Authentication flaw in webhook handling (function check_ipaymu_response) across versions up to 2.0.2, due to lack of signature verification and origin checks. This allows unauthent...

8.2CVSS5.8AI score0.00344EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/01/07 6:33 a.m.•16 views

WordPress iPaymu Payment Gateway for WooCommerce plugin <= 2.0.2 - Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure vulnerability

Missing Authentication to Unauthenticated Payment Bypass and Order Information Disclosure vulnerability discovered by Teerachai Somprasong in WordPress Plugin iPaymu Payment Gateway for WooCommerce versions = 2.0.2...

8.2CVSS6.4AI score0.00344EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•1 views

CVE-2026-0656: Missing Authorization

The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 2.0.2 via the 'checkipaymuresponse' function. This is due to the plugin not validating webhook request authenticity through signature verification or origi...

8.2CVSS5.7AI score0.00344EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•33 views

PT-2026-1574

Name of the Vulnerable Software and Affected Versions iPaymu Payment Gateway for WooCommerce plugin for WordPress versions up to and including 2.0.2 Description The iPaymu Payment Gateway for WooCommerce plugin for WordPress is susceptible to missing authentication. This occurs because the plugin...

8.2CVSS6.2AI score0.00344EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/01/07 12:00 a.m.•20 views

WordPress plugin iPaymu Payment Gateway for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.2CVSS6.8AI score0.00344EPSS
SaveExploits0References3
Rows per page
Query Builder