Unrated severityNVD Advisory· Published Jul 29, 2026· Updated Jul 29, 2026
PayU CommercePro <= 3.8.9 - Unauthenticated Order Tampering
CVE-2026-13692
Description
The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=3.8.9
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e2dc15c7-2210-4be8-b7f3-55a9477e488d/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.