VYPR

Snap Finance WordPress plugin

by WordPress

CVEs (1)

  • CVE-2026-94273Oct 19, 2026
    risk 0.00cvss —epss —

    The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without…