Unrated severityNVD Advisory· Published Oct 5, 2026

CVE-2026-84169

Description

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/UPI QR Code Payment Gatewayllm-create
Range: <=1.4.3

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/94a90832-4cf9-4664-9086-5705429f759c/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000