WordPress WPForms Lite plugin 1.10.0.1-2.0.2.1 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Abdulrhman Mari d7mr4ny in WordPress Plugin Contact Form by WPForms versions 1.10.0.1-2.0.2.1...

WordPress Visma Pay for WooCommerce plugin < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure vulnerability

Unauthenticated Payment Bypass and Order Data Disclosure vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Visma Pay for WooCommerce versions 1.2.2...

WordPress Tickera plugin < 3.6.0.4 - Unauthenticated Order Payment Bypass vulnerability

Unauthenticated Order Payment Bypass vulnerability discovered by ryan fabella in WordPress Plugin Tickera versions 3.6.0.4...

CVE-2026-88998

The Tickera WordPress plugin, specifically versions prior to 3.6.0.4 , is vulnerable to an unauthenticated order payment bypass via 2Checkout IPN . The root cause is the plugin's failure to correctly verify the integrity of incoming payment notifications; specifically, the validated signature doe...

CVE-2026-88998 Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN

The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the order or the amount, allowing unauthenticated attackers to forge a payment confirmation and mark arbitrary orders as paid without...

CVE-2026-82844 WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal Commerce

The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Commerce gateway, allowing unauthenticated visitors to submit paid forms without paying. The form's confirmation is delivered and its...

CVE-2026-82844

The WPForms Lite WordPress plugin (versions 1.10.0.1 - 2.0.2.1 ) contains a vulnerability where it fails to perform server-side verification of completed payments when using the PayPal Commerce gateway . This allows unauthenticated visitors to submit paid forms without making an actual payment. C...

CVE-2026-103308 Visma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return Endpoint

The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is empty on a store which has not entered its credentials, allowing unauthenticated attackers to mark arbitrary orders as paid and to...

CVE-2026-103308

The Visma Pay for WooCommerce WordPress plugin before version 1.2.2 is vulnerable to an unauthenticated payment bypass and order data disclosure . The root cause is a failure to verify the authenticity of payment gateway return requests, specifically relying on a merchant secret that remains empt...

CVE-2026-87974 Asaas Gateway for WooCommerce < 2.7.8 - Unauthenticated Order Payment Bypass via Webhook

The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers ...

CVE-2026-87974

The Asaas Gateway for WooCommerce WordPress plugin (versions before 2.7.8 ) is vulnerable to an unauthenticated order payment bypass via a webhook flaw. The plugin fails to properly authenticate its payment webhook by accepting an empty access token in its default configuration. Furthermore, it d...

WordPress UnitechPay plugin <= 1.0.6.3 - Unauthenticated Order Payment Bypass vulnerability

Unauthenticated Order Payment Bypass vulnerability discovered by Timur in WordPress Plugin UnitechPay versions = 1.0.6.3...

CVE-2026-87841 UnitechPay <= 1.0.6.3 - Unauthenticated Order Payment Bypass via Unsigned Webhook

The UnitechPay WordPress plugin through 1.0.6.3 does not verify the authenticity of the payment notifications it receives, allowing unauthenticated attackers to mark orders placed through it as paid without any payment being made, as well as to force other orders into a failed state...

CVE-2026-87841

The UnitechPay WordPress plugin (versions through 1.0.6.3 ) is vulnerable to an unauthenticated order payment bypass due to a lack of verification for the authenticity of received payment notifications. This allows unauthenticated attackers to exploit unsigned webhooks to mark orders as paid with...

CVE-2026-107636 pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController

pH7Builder pH7 Social Dating CMS before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields. Attackers can set itemnumber, cartorderid, or the PayPal custom field while...

CVE-2026-103517 Airwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook

The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying...

CVE-2026-103517

The Airwallex Online Payments Gateway WordPress plugin, in versions prior to 1.36.0 , is vulnerable to an unauthenticated payment bypass. The root cause is a failure to verify the authenticity of incoming payment notifications when no webhook secret is configured. This allows unauthenticated atta...

WordPress Nexi XPay Build plugin <= 7.6.2 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, Iñigo Sánchez Enciso in WordPress Plugin Nexi XPay Build versions = 7.6.2...

CVE-2026-82212 Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...

CVE-2026-82212 Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler

The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has no stored token, which allows unauthenticated attackers to mark arbitrary orders as paid, or to mark genuinely paid...