Unrated severityNVD Advisory· Published Oct 25, 2026
CVE-2026-94295
CVE-2026-94295
Description
The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notification actually originated from the payment provider before marking the associated order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without any payment being made.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.0.6
Patches
Vulnerability mechanics
References
1News mentions
1- WordPress Plugins: 25 Vulnerabilities Disclosed in Batch, Including Critical FlawsVypr Intelligence · Oct 25, 2026