Medium severity5.3NVD Advisory· Published Oct 15, 2026
CVE-2026-92429
CVE-2026-92429
Description
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <5.5.3
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.