medium5.3
CVE-2026-84043
The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing u…
Impact
The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attackers to mark orders as paid without a valid gateway signature.
Affected products
| Product | Affected versions |
|---|---|
| EPayco Payment Gateway For WooCommerce WordPress Plugin | before 8.4.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.