Unrated severityNVD Advisory· Published Oct 19, 2026
CVE-2026-106014
CVE-2026-106014
Description
The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing unauthenticated attackers to mark orders as paid without actually paying.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.0.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.