VYPR

Thanh Toán Quét Mã QR Code Tự Động

by WordPress

CVEs (1)

  • CVE-2026-105970Nov 8, 2026
    risk 0.00cvss —epss —

    The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authenticity of incoming bank-transfer payment notifications on a default installation, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid.