Aller au contenu
Se connecter
8.2 Élevée

CVE-2026-82211 The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its…

Description

The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them, and to obtain order keys which expose guest buyers' details.

Produits et versions touchés

Produit Versions touchées Corrigé en
Nexi XPay Build 7.0 7.0.0 → 7.6.2 Pas de correctif indiqué

Autres CVE de Nexi XPay Build

Les 3 CVE de Nexi XPay Build →
CVE-2026-82212 The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment… 7.5 Élevée CVE-2026-82213 The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested… 5.3 Moyenne
Suivre cette CVE