CVE-2026-86791Medium· 5.3▾ SunlitThe iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to re…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to rewrite its total.
ipospays_payment_gateway_for_woocommerce < 1.4.7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-31356NoneInsufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure
CVE-2026-16487High· 8.1Bootc: containers-common: bootc: automatic updates can apply unsigned mutable-tag content under default containers policy
CVE-2026-16460High· 7.4Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization
CVE-2026-103311Medium· 5.3Coinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared Secret
CVE-2026-74922Medium· 5.3Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass
CVE-2026-111392Medium· 4.8SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate