Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | CVE-2026-103299 |
The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured before using it to authenticate the bank's payment-notification callback,...
Payment GatewayPayment Gateway woo-alpha-bank-payment-gateway
|
NVD | |||
|
CVE-2026-103299The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured before using it to authenticate the bank's payment-notification callback,...
Executive summaryThe Payment Gateway WordPress plugin (woo-alpha-bank-payment-gateway) is affected by an authentication bypass flaw, according to the advisory. The advisory rates it as medium severity with a CVSS score of 5.3, and it states that no known fix is available. Technical summaryThe flaw is an authentication bypass (CWE-287) in which the plugin does not ensure a shared secret is configured before using it to authenticate the bank's payment-notification callback. The advisory gives a CVSS score of 5.3 (medium). Affected versions are stated as through 2.2.0. The advisory states there is no known fix, so no fixed version is given. Attack vector details, required privileges, and any workarounds are not stated. Exploitation in the wild and detection guidance are not stated. The advisory also lists several unrelated plugin titles under an 'Other' section, which are not part of this plugin's description. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from wpscan.com/vulnerability/0a1c3070-181d-…ea-9488-d0d7e4be419c ScoreNo CVSS score published. AffectsPayment GatewayPayment Gateway woo-alpha-bank-payment-gateway
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||