Skip to content
Sign in
5.3 Medium

CVE-2026-94273 The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually…

Description

The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment.

Affected products and versions

Product Affected versions Fixed in
Snap Finance 3.11 earliest → 3.11.0 No fix stated

Other CVEs of Snap Finance

The 2 CVEs of Snap Finance →
CVE-2026-94272 The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status… 5.3 Medium
Track this CVE