VYPR

Payment Gateway for Idram

by WordPress

CVEs (1)

  • CVE-2026-103302Oct 21, 2026
    risk 0.00cvss —epss —

    The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of incoming payment notifications, because the merchant credentials used to compute their checksum are empty by default, allowing unauthenticated attackers to forge a valid payment…