PT-2026-97303 · WordPress · Sudan Payment Gateway For Woocommerce
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SUMIT Payment Gateway for WooCommerce WordPress plugin versions prior to 4.0.0
Description
The plugin fails to verify the authenticity of payment notifications with the payment provider before marking an order as paid. This allows unauthenticated users to mark pending orders as paid without actually completing the payment process.
Recommendations
Update the SUMIT Payment Gateway for WooCommerce WordPress plugin to version 4.0.0 or later.
Exploit
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sudan Payment Gateway For Woocommerce