CVE-2026-85632
CRITICAL
NVD
CVSS Score
9.1
Severity
CRITICAL
Published
Nov 11, 2026
Vendor
unknown
Description
Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module allows Authentication Bypass and Application API Message Manipulation via Man-in-the-Middle. This issue affects WooCommerce Virtual POS Module: from 26.8.3 before 26.9.1.