Unrated severityNVD Advisory· Published Oct 19, 2026
CVE-2026-94273
CVE-2026-94273
Description
The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=3.11.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.