Unrated severityNVD Advisory· Published Oct 28, 2026
CVE-2026-103331
CVE-2026-103331
Description
The UniPAY Payment Gateway For WooCommerce WordPress plugin through 2.3 does not properly verify the authenticity of payment notifications, as their signature is checked against a merchant secret that is empty by default, allowing unauthenticated attackers to forge a valid notification and mark arbitrary orders as paid.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.