medium5.3
CVE-2026-106014
The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return …
Impact
The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing unauthenticated attackers to mark orders as paid without actually paying.
Affected products
| Product | Affected versions |
|---|---|
| Gateway For Vantiv On WC WordPress Plugin | through 1.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.