medium5.3
CVE-2026-103332
The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying …
Impact
The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation secret that is empty by default, allowing unauthenticated attackers to forge a valid payment confirmation and mark any order as paid.
Affected products
| Product | Affected versions |
|---|---|
| Payex Payment Gateway For Woocommerce WordPress Plugin | through 1.2.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.