5.3
Moyenne
CVE-2026-84169 The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request…
Description
The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UPI QR Code Payment Gateway 1.4 | premières → 1.4.3 | Pas de correctif indiqué |