CVE-2026-94273
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 19, 2026
Vendor
unknown
Description
The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment.