Threats tagged 'ghsa-xw2m-gwmp-p7g6'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.1%	CVE-2026-103306The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not properly verify the authenticity of its payment gateway callback on a default installation, allowing unauthenticated attackers to forge a successful payment notification and mark arbitrary orders as paid without any payment being made, and to mark arbitrary unprocessed orders as failed Medium5.3EPSS 0.1%2026-10-26GCVE DatabaseCVE-2026-103306 The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not properly verify the authenticity of its payment gateway callback on a default installation, allowing unauthenticated attackers to forge a successful payment notification and mark arbitrary orders as paid without any payment being made, and to mark arbitrary unprocessed orders as failed. EPSS 0.1%Report on CVE-2026-103306 Vulnerability CWE-287 #ghsa-xw2m-gwmp-p7g6	GCVE Database	2026-10-26

Page 1 of 1