Threats tagged 'ghsa-g7qx-5gmm-r2gh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	3.7	CVE-2026-103325The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its Low3.72026-10-27GCVE DatabaseCVE-2026-103325 The TiendaCrypto para WooCommerce WordPress plugin versions through 1.2.1 improperly verify payment webhook authenticity by validating signatures against an always-empty key. This flaw allows unauthenticated attackers to forge webhook notifications and mark arbitrary WooCommerce orders as paid on web servers that preserve request header case. Report on CVE-2026-103325 Vulnerability #ghsa-g7qx-5gmm-r2gh	GCVE Database	2026-10-27

Page 1 of 1