VYPR

CamPay Shortcode Payment Gateway

by WordPress

CVEs (1)

  • CVE-2026-105975Oct 14, 2026
    risk 0.00cvss —epss —

    The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result from client-supplied parameters, allowing unauthenticated attackers to mark payment records as paid, destroy…