5.3
Medium
CVE-2026-84043 The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of…
Description
The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attackers to mark orders as paid without a valid gateway signature.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ePayco Payment Gateway for WooCommerce 8.4 | earliest → < 8.4.7 | 8.4.7 |