CVE WATCH / VULNERABILITY DETAIL
CVE-2026-103359
MEDIUMCVSS 5.3NVD feed
Published 27 October 2026 · tracked since 28 October 2026
Description
The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming payment notifications and, until the gateway is configured, authenticates them with a value derived from an empty secret that anyone can compute, allowing unauthenticated attackers to
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-117602 HIGH 8.4
- CVE-2026-117603 MEDIUM 4.3
- CVE-2026-117566 MEDIUM 5.3
- CVE-2026-117564 CRITICAL 9.8
- CVE-2026-117558 HIGH 7.8
- CVE-2026-117559 HIGH 7.8
- CVE-2026-117554 MEDIUM 4.3
- CVE-2026-65119 HIGH 8.4
- CVE-2026-117499 LOW 3.7
- CVE-2026-10752 MEDIUM 4.8