VYPR

Visma Pay for WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-103308MedOct 14, 2026
    risk 0.42cvss 6.5epss —

    The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is empty on a store which has not entered its credentials, allowing unauthenticated attackers to mark arbitrary…