Unrated severityNVD Advisory· Published Nov 8, 2026
CVE-2026-105970
CVE-2026-105970
Description
The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authenticity of incoming bank-transfer payment notifications on a default installation, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2.0.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.