PT-2026-85465 · WordPress · Epayco Payment Gateway For Woocommerce

Pedro Pinho

·

CVE-2026-84043

·

Published

2026-09-04

·

Updated

2026-09-04

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions ePayco Payment Gateway for WooCommerce WordPress plugin versions prior to 8.4.7
Description The plugin fails to properly verify the authenticity of payment confirmation requests. This allows unauthenticated attackers to mark orders as paid by bypassing the requirement for a valid gateway signature.
Recommendations Update the ePayco Payment Gateway for WooCommerce WordPress plugin to version 8.4.7 or later.

Exploit

Fix

Insufficient Verification of Data Authenticity

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2026-84043

Affected Products

Epayco Payment Gateway For Woocommerce