CVE-2026-103332
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 27, 2026
Vendor
unknown
Description
The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation secret that is empty by default, allowing unauthenticated attackers to forge a valid payment confirmation and mark any order as paid.