Unrated severityNVD Advisory· Published Oct 14, 2026

CVE-2026-94360

Description

The Paymentfor Gateway for WooCommerce WordPress plugin before 1.0.6 does not verify the authenticity of an inbound payment notification before marking an order as paid, allowing unauthenticated attackers to mark orders as paid without any payment being completed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Fomo Payment Gateway For Woocommercellm-fuzzy
Range: <1.0.6
Package: https://wordpress.org/plugins/fomo-payment-gateway-for-woocommerce

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/f9ef7bfe-3e25-4edf-9c02-3fa9e2873e84/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000