Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Sadad Qa Payment
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-103330 | 1 Wordpress-extensions | 1 Sadad Qa Payment | 2026-10-28 | 5.3 Medium |
| The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is empty by default and the rest of the signed data is attacker-controlled, allowing unauthenticated attackers to forge a valid confirmation and mark orders as paid without payment. | ||||
Page 1 of 1.