Search vulnerabilities

Results 1

Export CSV
CVE-2026-84043

ePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass

The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attackers to mark orders as paid without a valid gateway signature.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed