5.3
Moyenne
CVE-2026-12972 The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation…
Description
The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to tamper with the payment-related metadata of arbitrary WooCommerce orders.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PayPlus Payment Gateway 8.2 | premières → < 8.2.2 | 8.2.2 |