VYPR

Integrate PhonePe with WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-10599HigAug 6, 2026
    risk 0.49cvss 7.5epss

    The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to the order being marked as paid, nor does it verify the authenticity of its payment-completion request, allowing unauthenticated attackers to…