Dashboard / CVE-2026-94361

CVE-2026-94361

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-10-31 Modified: 2026-10-31 First seen: 2026-10-31 Status: pending_score

Description

The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order paid or failed, allowing unauthenticated attackers to change the payment status of any order in the store regardless of the payment method it was placed with.

Affected Software (1)

VendorProductVersion
Unknown Payable Payment Gateway for WooCommerce 0 < 1.3.1

References & Advisories (1)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.15%
Raw Score 0.001470
Percentile 3.9%
Date 2026-10-31

Intelligence Sources

mitre ref →
nvd ref →

External Links