Skip to content
Sign in
5.3 Medium

CVE-2026-94271 The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when…

Description

The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check the payment status or amount, allowing unauthenticated users to have orders marked as paid without any payment being taken.

Affected products and versions

Product Affected versions Fixed in
Deema Payment Gateway 1.1 earliest → 1.1.2 No fix stated

Other CVEs of Deema Payment Gateway

The 2 CVEs of Deema Payment Gateway →
CVE-2026-94270 The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider… 5.3 Medium
Track this CVE