Unrated severityNVD Advisory· Published Oct 27, 2026
CVE-2026-103332
CVE-2026-103332
Description
The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation secret that is empty by default, allowing unauthenticated attackers to forge a valid payment confirmation and mark any order as paid.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.2.10
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.