CVE-2026-12966 Direct Payments for WooCommerce < 2.5.3 - Unauthenticated Cross-Customer Order Tampering via digages AJAX Actions

The Direct Payments for WooCommerce WordPress plugin before 2.5.3 does not verify that the requester owns the targeted WooCommerce order in several unauthenticated AJAX handlers before changing its status and overwriting its payment metadata, allowing unauthenticated attackers to tamper with othe...

EUVD-2026-51723

The Direct Payments for WooCommerce WordPress plugin before 2.5.3 does not verify that the requester owns the targeted WooCommerce order in several unauthenticated AJAX handlers before changing its status and overwriting its payment metadata, allowing unauthenticated attackers to tamper with othe...

Threat Outbreak Alert: Fake Payment Proof Details Email Messages on May 11, 2012

Low Alert ID: 25907 First Published: 2012 May 14 14:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam e-mail messages that claim to contain proof of payment for the recipient. The text in the e-mail message attempts to convince the...