medium5.3
CVE-2026-87978
The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its payment webhook, allowing unauthenticated …
Impact
The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its payment webhook, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid without any payment.
Affected products
| Product | Affected versions |
|---|---|
| Paymob For WooCommerce WordPress Plugin | before 4.1.14 |
Versions were read from the advisory text. No structured product data has been published for this record yet.