Medium severity5.3NVD Advisory· Published Sep 11, 2026· Updated Sep 11, 2026
CVE-2026-82213
CVE-2026-82213
Description
The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested belongs to the current user, allowing unauthenticated attackers to retrieve other customers' stored card token references together with a valid authorisation signature.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2>=7.6.1,<7.6.3+ 1 more
- (no CPE)range: >=7.6.1,<7.6.3
- (no CPE)range: 7.6.1 - 7.6.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.