Skip to content
Sign in
5.3 Medium

CVE-2026-94272 The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status…

Description

The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated attackers to move any order into a paid state or force it to fail.

Affected products and versions

Product Affected versions Fixed in
Snap Finance 1.0 1.0.8 → < 3.12.0 3.12.0

Other CVEs of Snap Finance

The 2 CVEs of Snap Finance →
CVE-2026-94273 The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually… 5.3 Medium
Track this CVE