58 matches found
CVE-2026-13692
The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
EUVD-2026-50118
The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
CVE-2026-13692 PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering
The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
CVE-2026-13692
The PayU CommercePro Plugin for WordPress (versions before 3.9.0 ) contains a vulnerability where it fails to verify the payment-gateway signature before applying order modifications. This flaw allows unauthenticated attackers to tamper with the totals, shipping details, and metadata of arbitrary...
WordPress PayU CommercePro Plugin plugin <= 3.8.9 - Unauthenticated Order Tampering vulnerability
Unauthenticated Order Tampering vulnerability discovered by J4ck13Ch4n in WordPress Plugin PayU India versions = 3.8.9...
CVE-2026-13692 PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering
The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
CVE-2026-13692
The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
CVE-2026-13692: Missing Authorization
The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
PT-2026-65694
The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders...
CVE-2026-61954
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
CVE-2026-61954 WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
CVE-2026-61954
CVE-2026-61954 affects the WordPress PayU India plugin up to version 3.8.9, with an Unauthenticated Broken Access Control vulnerability. The available documents identify the affected product (WordPress PayU India plugin) and the vulnerable version range (
EUVD-2026-48210
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
CVE-2026-61954 WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
PT-2026-63868
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
CVE-2026-61954: Missing Authorization
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin PayU India versions = 3.8.9...
EUVD-2019-6068
Malware in sbrugna...