medium5.3
CVE-2026-96200
The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provide…
Impact
The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provider, allowing unauthenticated attackers to mark arbitrary orders as paid without payment.
Affected products
| Product | Affected versions |
|---|---|
| Payments For Hubtel WordPress Plugin | before 1.0.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.