sumit_payment_gateway_for_woocommerce vulnerabilities

CVEs whose affected-version data names the sumit_payment_gateway_for_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-84091Medium· 5.3PoC

yesterday

The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not verify with the payment provider that a payment notification is genuine before marking the corresponding order as paid, allowing unauthenticated users to ma…

The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not verify with the payment provider that a payment notification is genuine before marking the corresponding order as paid, allowing unauthenticated users to ma…

▾ Twilightvia NVD