CVE-2026-13692
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 29, 2026
Vendor
unknown
Description
The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders.