medium5.3
CVE-2026-92428
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, al…
Impact
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.
Affected products
| Product | Affected versions |
|---|---|
| Rede Itaú For WooCommerce WordPress Plugin | before 5.5.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.