CVE-2026-103312

The Payment Integration Wompi WordPress plugin version 4.0.1 and below is vulnerable to an unauthenticated payment confirmation forgery. The root cause is that the plugin fails to verify the authenticity of incoming payment notifications on a stock installation because the callback checksum is ke...