Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:49:50 +0000 CVE-2026-12584 — Payment Gateway for Redsys & WooCommerce Lite < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay Cal… https://cve.radiocsirt.org/vuln/cve-2026-12584 <p><strong>Affected:</strong> Unknown Payment Gateway for Redsys &amp; WooCommerce Lite</p> <p>The Payment Gateway for Redsys &amp; WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of incoming payment-provider notifications for one of its payment methods before marking orders as paid, allowing unauthenticated attackers to forge a payment-confirmation callback and complete their own orders without paying.</p> <p><strong>Affected:</strong> Unknown Payment Gateway for Redsys &amp; WooCommerce Lite</p> <p>The Payment Gateway for Redsys &amp; WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of incoming payment-provider notifications for one of its payment methods before marking orders as paid, allowing unauthenticated attackers to forge a payment-confirmation callback and complete their own orders without paying.</p> https://cve.radiocsirt.org/vuln/cve-2026-12584