Unrated severityNVD Advisory· Published Oct 28, 2026

CVE-2026-103372

Description

The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning its confirmation link, allowing unauthenticated users to obtain any paid order's key and, for recent guest orders, view the customer's personal details.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Payconiqllm-create
Range: <=1.0.4

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/19956956-b66f-47e6-9038-29d38283589a/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000