Threats tagged 'ghsa-p42q-6x3c-7prr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-110292The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the requester owns the High2026-10-28GCVE DatabaseCVE-2026-110292 A vulnerability in the PayPlug for WooCommerce (Official) WordPress plugin before version 3.1.1 allows unauthenticated users to disclose another customer's order key and cancel their unpaid guest order. This occurs because the plugin does not verify that the requester owns the WooCommerce order referenced in a payment request. Report on CVE-2026-110292 Vulnerability #ghsa-p42q-6x3c-7prr	GCVE Database	2026-10-28

Page 1 of 1