CVE-2026-92996 Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done

The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unauthenticated users to mark any order as paid...

CVE-2026-89411

The Paymattic WordPress plugin (versions 4.6.20 through 4.6.25) contains a vulnerability where it fails to verify that a confirmed Stripe payment corresponds to the specific order it is being applied to. This flaw allows unauthenticated users to perform an unauthenticated payment bypass by confir...

CVE-2026-89411 Paymattic < 4.6.26 - Unauthenticated Payment Bypass via Unbound Stripe PaymentIntent

The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauthenticated users to mark an arbitrary pending order as paid by confirming a smaller payment of their own against it...

CVE-2026-89411 Paymattic < 4.6.26 - Unauthenticated Payment Bypass via Unbound Stripe PaymentIntent

The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauthenticated users to mark an arbitrary pending order as paid by confirming a smaller payment of their own against it...

EUVD-2026-88099

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

CVE-2026-86838

The Bookly WordPress plugin before version 28.3 is vulnerable to an unauthenticated payment bypass . The root cause is a lack of server-side validation for client-supplied booking quantity values during the calculation of the appointment total. This allows unauthenticated users to manipulate the ...

CVE-2026-86838 Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

CVE-2026-86838 Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

PT-2026-99774

Name of the Vulnerable Software and Affected Versions Bookly WordPress plugin versions prior to 28.3 Description Insufficient server-side validation of client-supplied booking quantity values allows unauthenticated users to manipulate the appointment total. By reducing the total to zero, an...

CVE-2026-86838: External Control of Assumed-Immutable Web Parameter

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

WordPress Paymob for WooCommerce plugin < 4.1.14 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Charles Vosburgh in WordPress Plugin Paymob for WooCommerce versions 4.1.14...

CVE-2026-87978 Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its payment webhook, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid without any payment...

CVE-2026-87978 Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its payment webhook, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid without any payment...

CVE-2026-89420

Improper Validation of Specified Quantity in Input in ZenHive mpp allows a client holding an open payment channel to obtain paid resources without being charged. MPP.Session.Actions.acceptvoucher/3 in lib/mpp/session/actions.ex treats a voucher whose cumulativeAmount equals the channel's...

WordPress Payment Gateway for PayPal on WooCommerce plugin < 9.2.1 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Charles Vosburgh in WordPress Plugin Payment Gateway for PayPal on WooCommerce versions 9.2.1...

CVE-2026-92400 Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion

The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that an incoming payment notification was confirmed in the store's configured payment environment or paid to the store's own merchant account before marking an order complete, allowing unauthenticated user...

CVE-2026-92400 Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion

The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that an incoming payment notification was confirmed in the store's configured payment environment or paid to the store's own merchant account before marking an order complete, allowing unauthenticated user...

CVE-2026-92400

The Payment Gateway for PayPal on WooCommerce WordPress plugin (before version 9.2.1 ) fails to verify that an incoming payment notification was confirmed in the store's configured payment environment or paid to the store's own merchant account before marking an order as complete. This allows una...

WordPress Paid Membership Subscriptions plugin < 3.0.9 - Unauthenticated Membership Payment Bypass vulnerability

Unauthenticated Membership Payment Bypass vulnerability discovered by Charles Vosburgh in WordPress Plugin Paid Member Subscriptions versions 3.0.9...

WordPress Robokassa payment gateway for Woocommerce plugin < 1.8.9 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Pedro Pinho in WordPress Plugin Robokassa payment gateway for Woocommerce versions 1.8.9...