Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-82213 The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested…

Description

The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested belongs to the current user, allowing unauthenticated attackers to retrieve other customers' stored card token references together with a valid authorisation signature.

Produits et versions touchés

Produit Versions touchées Corrigé en
Nexi XPay Build 7.6 7.6.1 → 7.6.2 Pas de correctif indiqué

Autres CVE de Nexi XPay Build

Les 3 CVE de Nexi XPay Build →
CVE-2026-82212 The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment… 7.5 Élevée CVE-2026-82211 The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its… 8.2 Élevée
Suivre cette CVE