Unrated severityNVD Advisory· Published Oct 31, 2026
CVE-2026-94361
CVE-2026-94361
Description
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order paid or failed, allowing unauthenticated attackers to change the payment status of any order in the store regardless of the payment method it was placed with.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.3.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.