CVE-2026-121970

The Pay with Vipps and MobilePay for WooCommerce (woo-vipps) plugin, in versions prior to 6.4.1 , is vulnerable to an improper cryptographic signature verification in the recurring-payment webhook handler . The root cause is that the code fails to exit when a local webhook secret is missing, inst...

CVE-2026-121970 Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgery

Pay with Vipps and MobilePay for WooCommerce woo-vipps before 6.4.1 contains an improper cryptographic signature verification vulnerability in the recurring-payment webhook handler that allows unauthenticated attackers to forge webhook requests when no local webhook secret is stored, because the...

CVE-2026-121970: wphostingdev Pay with Vipps and MobilePay for WooCommerce: Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before 6.4.1 contains an improper cryptographic signature…

Pay with Vipps and MobilePay for WooCommerce woo-vipps before 6.4.1 contains an improper cryptographic signature verification vulnerability in the recurring-payment webhook handler that allows unauthenticated attackers to forge webhook requests when no local webhook secret is stored, because the...

CVE-2026-94568

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0...

CVE-2026-94568

The Pay with Vipps for WooCommerce (woo-vipps ) WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This flaw affects versions up to and including 6.2.0 . An attacker can exploit this vulnerability to perform object injection, potentially leading ...