Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 07:18:09 +0000 CVE-2026-12973 — PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Key Disclosure and Order Status Modification https://cve.radiocsirt.org/vuln/cve-2026-12973 <p><strong>Affected:</strong> Unknown PayPlus Payment Gateway</p> <p>The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to disclose the secret order key of arbitrary WooCommerce orders and, under some configurations, to modify order statuses.</p> <p><strong>Affected:</strong> Unknown PayPlus Payment Gateway</p> <p>The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to disclose the secret order key of arbitrary WooCommerce orders and, under some configurations, to modify order statuses.</p> https://cve.radiocsirt.org/vuln/cve-2026-12973