CVE-2026-103331

The UniPAY Payment Gateway For WooCommerce WordPress plugin, in versions through 2.3 , contains a vulnerability where it fails to properly verify the authenticity of payment notifications. The root cause is that signatures are checked against a merchant secret which is empty by default. This flaw...