Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | CVE-2026-103306 |
The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not properly verify the authenticity of its payment gateway callback on a default installation,...
iK Pay, ikhokhaiK Pay Gateway, ikhokha-payment-gateway
|
NVD | |||
|
CVE-2026-103306The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not properly verify the authenticity of its payment gateway callback on a default installation,...
Executive summaryThe Online Payments with iK Pay Gateway WordPress plugin, published under the name ikhokha-payment-gateway, is affected by an authentication bypass in versions before 3.0.4. The advisory says the flaw is rated medium severity with a CVSS score of 5.3, and the fix is to update to version 3.0.4. Technical summaryThe weakness is classified as CWE-287 (improper authentication) and the advisory labels it AUTHBYPASS. The plugin does not properly verify the authenticity of its payment gateway callback on a default installation. The advisory does not state the attack vector details, the exact preconditions beyond default installation, or whether exploitation has been observed in the wild. The affected versions are stated as before 3.0.4 and the fixed version is 3.0.4. The advisory does not state any workaround or detection guidance. The CVSS score given is 5.3 (medium), and no CVSS vector string is provided. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from wpscan.com/vulnerability/2d888e78-ed1f-…68-9bdc-19e9420f6956 ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||